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Foreword 



rd , 



This Technical Specification has been produced by the 3 Generation Partnership Project (3GPP). 

The contents of the present document are subject to continuing work within the TSG and may change following formal 
TSG approval. Should the TSG modify the contents of the present document, it will be re-released by the TSG with an 
identifying change of release date and an increase in version number as follows: 

Version x.y.z 

where: 

X the first digit: 

1 presented to TSG for information; 

2 presented to TSG for approval; 

3 or greater indicates TSG approved document under change control. 

y the second digit is incremented for all changes of substance, i.e. technical enhancements, corrections, 
updates, etc. 

z the third digit is incremented when editorial only changes have been incorporated in the document. 



£75/ 



3GPP TS 29.228 version 1 0.1 .0 Release 1 7 ETSI TS 1 29 228 V1 0.1 .0 (201 1 -04) 

1 Scope 

This 3GPP Technical Specification (TS) specifies: 

1. The interactions between the HSS (Home Subscriber Server) and the CSCF (Call Session Control Functions), 
referred to as the Cx interface. 

2. The interactions between the CSCF and the SLF (Server Locator Function), referred to as the Dx interface. 

The IP Multimedia (IM) Subsystem stage 2 is specified in 3GPP TS 23.228 [1] and the signalUng flows for the IP 
multimedia call control based on SIP and SDP are specified in 3GPP TS 24.228 [2]. 

This document addresses the signalling flows for Cx and Dx interfaces. 

This document also addresses how the functionality of Px interface is accomplished. 

The Presence Service Stage 2 description (architecture and functional solution) is specified in 3GPP TS 23.141 [10]. 

2 References 

[ 1 ] 3GPP TS 23 .228 : "IP Multimedia (IM) Subsystem - Stage 2" 

[2] 3GPP TS 24.228: "SignaHing flows for the IP multimedia call control based on SIP and SDP" 

[3] 3GPP TS 33.203: "Access security for IP-based services" 

[4] 3GPP TS 23.002: "Network architecture" 

[5] 3GPP TS 29.229: "Cx Interface based on Diameter - Protocol details" 

[6] 3GPP TS 23.218: "IP Multimedia (IM) Session HandHng; IP Multimedia (IM) call model" 

[7] IETF RFC 2045 "Multipurpose Internet Mail Extensions (MIME) Part One: Format of Internet 

Message Bodies" 

[8] 3GPP TS 24.229: "IP Multimedia Call Control Protocol based on SIP and SDP" - stage 3 

[9] IETF RFC 3588 "Diameter Base Protocol" 

[10] 3GPP TS 23.141: "Presence Service; Architecture and Functional Description" 

[11] IETF RFC 3261 "SIP: Session Initiation Protocol" 

[12] IETF RFC 4566 "SDP: Session Description Protocol" 

[13] IEEE 1003.1-2004, Part 1: Base Definitions 

[14] IETF RFC 2486 "The Network Access Identifier" 

[15] IETF RFC 3966 "The tel URI for Telephone Numbers" 

[16] IETF RFC 2617 "HTTP Authentication: Basic and Digest Access Authentication" 

[17] 3GPP TS 23.003: "Numbering, addressing and identification" 

[18] 3GPP TS 23.008: "Organization of subscriber data" 

[19] 3GPP TS 23.380: "IMS Restoration Procedures" 

[20] IETF draft-dawes-sipping-debug-02 (August 2010): "Private Extension to the Session Initiation 

Protocol (SIP) for Debugging". 

[2 1 ] IETF RFC 4005 : "Diameter Network Access Server Apphcation" 
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[22] IETF RFC 4412: "Communications Resource Priority for the Session Initiation Protocol (SIP)" 

3 Definitions, symbols and abbreviations 

3.1 Definitions 

For the purposes of the present document, the following terms and definitions apply. 

Common Part (of a user profile): Contains Initial Filter Criteria instances that should be evaluated both for registered 
and unregistered Public User Identities, or for unregistered Public Service Identities in the S-CSCF. 

Complete user profile: Contains the Initial Filter Criteria instances of all three different user profile parts; registered 
part, unregistered part and common part. 

Distinct Public Service Identity: An individual Public Service Identity that is stored in the HSS as such. 

IP Multimedia session: IP Multimedia session and IP Multimedia call are treated as equivalent in this specification. 

Authentication pending flag: A flag that indicates that the authentication of a Public User Identity - Private User 
Identity pair is pending and waiting for confirmation. 

Charging information: Data that is sent in the Charging-Information AVP. 

Implicitly registered Public User Identity set: A set of Public User Identities, which are registered and de-registered 
simultaneously when any of the Public User Identities belonging to that set is registered or de-registered. 

Not Registered State: Public Identity is not Registered and has no S-CSCF assigned. 

Private Identity: Either a Private User Identity or a Private Service Identity. 

Public Identity: Either a Public User Identity or a Public Service Identity. 

Registered Part (of a user profile): Contains Initial Filter Criteria instances that should be evaluated only for registered 
Public User Identities in the S-CSCF. iFCs from the registered part need not be evaluated when the Public Identity is 
unregistered. 

Registered State: Public User Identity is Registered at the request of the user and has an S-CSCF assigned. 

S-CSCF reassignment pending flag: A flag that is handled only when IMS Restoration Procedures are supported. and 
that indicates that the subscription may be reassigned to a new S-CSCF (i.e. the current S-CSCF is not responding) 

Unregistered part (of a user profile): Contains Initial Filter Criteria instances that should be evaluated only for 
unregistered Public Identities in the S-CSCF. iFCs from the unregistered part need not be evaluated when the Public 
User Identity is registered. 

Unregistered State: Public Identity is not Registered but has a serving S-CSCF assigned to execute Unregistered state 
services as a consequence of a terminating request, or an originating request from an AS on behalf of a user, or there is 
an S-CSCF keeping the user profile stored. 

User information: The user related data that the S-CSCF requests from the HSS or HSS pushes to the S-CSCF, e.g. 
user profile and charging information. 

User profile: Data that is sent in the User-Data AVP. 

3.2 Abbreviations 

For the purposes of the present document, the following abbreviations apply: 

AVP Attribute Value Pair 

C Conditional 

CSCF Call Session Control Function 

GIBA GPRS-IMS-Bundled-Authentication 
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HSS Home Subscriber Server 

IE Information Element 

IP Internet Protocol 

I-CSCF Interrogating CSCF 

IM IP Multimedia 

IMS IP Multimedia Subsystem 

M Mandatory 

MPS Multimedia Priority Service 

NASS Network Attachment Subsystem 

O Optional 

P-CSCF Proxy CSCF 

SIP Session Initiation Protocol 

SLF Server Locator Function 

S-CSCF Serving CSCF 



Main Concept 



This document presents the Cx interface related functional requirements of the communicating entities. 
It gives a functional classification of the procedures and describes the procedures and message parameters. 
Error handling flows, protocol version identification, etc. procedures are also included. 

5 General Architecture 

This clause further specifies the architectural assumptions associated with the Cx reference point, building on 3GPP 
TS 23.228 [1] and also the Px reference point building upon 3GPP TS 23.141 [10]. 

5.1 Functional requirements of network entities 

5.1 .1 Functional requirements of P-CSCF 

There is no requirement for the interaction between the P-CSCF and the HSS. 

5.1 .2 Functional requirements of I-CSCF 

The I-CSCF communicates with the HSS over the Cx interface. 
For functionality of the I-CSCF refer to 3GPP TS 23.002 [4]. 

5.1 .3 Functional requirements of S-CSCF 

The S-CSCF communicates with the HSS over the Cx interface. 
For functionality of the S-CSCF refer to 3GPP TS 23.002 [4]. 

5.1 .4 Functional requirements of HSS 

The HSS communicates with the I-CSCF and the S-CSCF over the Cx interface. 
For functionality of the HSS refer to 3GPP TS 23.002 [4]. 

5.1 .5 Functional classification of Cx interface procedures 

Operations on the Cx interface are classified in functional groups: 
1 . Location management procedures 
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The operations regarding registration and de-registration. 
Location retrieval operation. 

2. User data handling procedures 

The download of user information during registration and to support recovery mechanisms. 
Operations to support the updating of user data and recovery mechanisms. 

3. User authentication procedures 

4. IMS Restoration Procedures (see 3GPP TS 23.380 [19]) to support S-CSCF service interruption 

5.1 .6 Functional Requirements of tine Presentity Presence Proxy 

The interaction between the Presentity Presence Proxy and the HSS, referred to as the Px interface, is handled using the 
mechanisms defined for the Cx interface. 



Procedure Descriptions 



In the tables that describe the Information Elements transported by each command, each Information Element is marked 
as (M) Mandatory, (C) Conditional or (O) Optional in the Category "Cat." column. The application level specification 
overrides the ABNF defining the presence of the AVPs to be included in the Diameter commands. The category defined 
by the Information Element table shall always be the same, i.e. Optional; or more restrictive, i.e. Mandatory or 
Conditional, than the presence requirements defined by the ABNF syntax, e.g. a required AVP in the ABNF shall not be 
overridden by an Optional IE but an Optional AVP in the ABNF may be overridden by the Mandatory or Conditional 
IE Category. 

A mandatory Information Element shall always be present in the command. If this Information Element is 
absent, an application error occurs at the receiver and an answer message shall be sent back to the originator of 
the request with the Result-Code set to DIAMETER_MISSING_AVP. This message shall also include a Failed- 
AVP AVP containing the missing Information Element i.e. the corresponding Diameter AVP defined by the 
AVP Code and the other fields set as expected for this Information Element. 

A conditional Information Element (marked as (C) in the table) shall be present in the command if certain 
conditions are fulfilled. 

If the receiver detects that those conditions are fulfilled and the Information Element is absent, an application 
error occurs and an answer message shall be sent back to the originator of the request with the Result-Code 
set to DIAMETER_MISSING_AVP. This message shall also include a Failed-AVP AVP containing the 
missing Information Element i.e. the corresponding Diameter AVP defined by the AVP Code and the other 
fields set as expected for this Information Element. 

If those conditions are not fulfilled, the Information Element shall be absent. If however this Information 
Element appears in the message, it shall not cause an application error and it may be ignored by the receiver 
if this is not explicitly defined as an error case. Otherwise, an application error occurs at the receiver and an 
answer message with the Result-Code set to DIAMETER_AVP_NOT_ALLOWED shall be sent back to the 
originator of the request. A Failed-AVP AVP containing a copy of the corresponding Diameter AVP shall be 
included in this message. 

An optional Information Element (marked as (O) in the table) may be present or absent in the command, at the 
discretion of the application at the sending entity. Absence or presence of this Information Element shall not 
cause an application error and may be ignored by the receiver. 

When a procedure is required to determine whether two S-CSCF names are equal, the rules for SIP URI comparison 
specified in RFC 3261 chapter 19.1.4 shall apply. 

When a procedure is required to determine the Public Identity used for an identity lookup in HSS and SLF, the HSS and 
SLF shall derive the Public Identity from the SIP URI or Tel URI contained in the Public-Identity AVP, if not already 
in canonical form as per 3GPP TS 23.003 [17], as described below: 
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- If the Public-Identity AVP contains a SIP URI, the HSS and SLF shall follow rales for conversion of SIP URI 
into canonical form as specified in IETF RFC 3261 [11] chapter 10.3. 

If the Public-Identity AVP contains a Tel URI in E.164 format, the HSS and SLF shall remove visual separators 
and remove all URI parameters. 

Unknown permanent failure error codes shall be treated in the same way as DIAMETER_UNABLE_TO_COMPLY. 
For unknown transient failure error codes the request may be repeated, or handled in the same way as 
DIAMETER_UNABLE_TO_COMPLY. 

6.1 Location management procedures 
6.1 .1 User registration status query 

This procedure is used between the I-CSCF and the HSS during SIP registrations. The procedure is invoked by the I- 
CSCF, corresponds to the combination of the functional level operations Cx-Query and Cx-Select-PuU (see 3GPP TS 
23.228 [1]) and is used: 

To authorize the registration of the distinct Public User Identity, checking multimedia subsystem access 
permissions and roaming agreements. 

To perform a first security check, determining whether the distinct Public User Identity in the message is 
associated with the Private User Identity sent in the message. 

To obtain either the S-CSCF where the distinct Public User Identity is registered or unregistered (i.e. registered 
as a consequence of an originating or terminating request or there is a S-CSCF keeping the user profile stored), 
or the list of capabilities that the S-CSCF has to support. 

This procedure is mapped to the commands User- Authorization-Request/ Answer in the Diameter application specified 
in 3GPP TS 29.229 [5]. Tables 6.1.1.1 and 6.1.1.2 detail the involved information elements. 
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Table 6.1 .1 .1 : User registration status query 



Information 
element name 


Mapping to 
Diameter AVP 


Cat. 


Description 


Public User 
Identity 
(See 7.2) 


Public-Identity 


M 


Public User Identity to be registered 


Visited 
Network 
Identifier 
(See 7.1) 


Visited- 

Network- 

Identifier 


M 


Identifier that allows the home network to identify the visited network 


Type of 
Authorization 
(See 7.14) 


User- 

Authorization- 

Type 


C 


Type of authorization requested by the l-CSCF. 

If the request corresponds to a de-registration, i.e. Expires field or expires 
parameter in Contact field in the REGISTER method is equal to zero, this 
AVP shall be present in the command and the value shall be set to DE- 
REGISTRATION. 

If the request corresponds to an initial registration or a re-registration, i.e. 
Expires field or expires parameter in Contact field in the REGISTER 
method is not equal to zero then this AVP may be absent from the 
command. If present its value shall be set to REGISTRATION. 
If the request corresponds to an initial registration or a re-registration and 
the l-CSCF explicitly queries the S-CSCF capabilities, then this AVP shall 
be present in the command and the value shall be set to 
REGISTRATION_AND_CAPABILITIES. The l-CSCF shall use this value 
when the S-CSCF currently assigned to the Public User Identity in the HSS, 
cannot be contacted and a new S-CSCF needs to be selected. 


Private User 
Identity 
(See 7.3) 


User-Name 


M 


Private User Identity 


Routing 
Information 
(See 7.13) 


Destination- 
Host, 

Destination- 
Realm 


C 


If the l-CSCF knows HSS name Destination-Host AVP shall be present in 
the command. Otherwise, only Destination-Realm AVP shall be present 
and the command shall be routed to the next Diameter node, e.g. SLF, 
based on the Diameter routing table in the l-CSCF. 


UAR Flags 
(See 7.19) 


UAR-Flags 





This Information Element contains a set of indications. See 7.19 for the 
content of the information element. 



Table 6.1.1.2: User registration status response 



Information 
element name 


Mapping to 
Diameter AVP 


Cat. 


Description 


Result 
(See 7.6) 


Result-Code / 
Experimental- 
Result 


M 


Result of the operation. 

Result-Code AVP shall be used for errors defined in the Diameter Base 

Protocol. 

Experimental-Result AVP shall be used for Cx/Dx errors. This is a grouped 

AVP which contains the 3GPP Vendor ID in the Vendor-Id AVP, and the 

error code in the Experimental-Result-Code AVP. 


S-CSCF 
capabilities 
(See 7.5) 


Server- 
Capabilities 





Required capabilities of the S-CSCF to be assigned to the IMS 
Subscription. 


S-CSCF Name 
(See 7.4) 


Server-Name 


C 


Name of the assigned S-CSCF. 



6.1.1.1 



Detailed behaviour 



The HSS shall, in the following order (if there is an error in any of the following steps the HSS shall stop processing 
and return the corresponding error code, see 3GPP TS 29.229 [5]): 

1 . Check that the Private User Identity and the Public User Identity exists in the HSS. If not Experimental-Result- 
Code shall be set to DIAMETER_ERROR_USER_UNKNOWN. 

2. Check that the Public User Identity matches a distinct Public User Identity in the HSS. If it doesn't, the 

Experimental-Result-Code shall be set to DIAMETER_ERROR_USER_UNKNOWN. 
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3. Check that the Public User Identity received in the request is associated with the Private User Identity received 
in the request. If not Experimental-Result-Code shall be set to DIAMETER_ERROR 
_IDENTITIES_DONT_MATCH. 

4. Check whether the Public User Identity received in the request is barred from the establishment of multimedia 

sessions. 

If it is an IMS Emergency Registration (by checking the UAR Flags) or the Public User Identity received in 
the request is not barred, continue to step 5. 

Otherwise, the HSS shall check whether there are other non-barred Public User Identities to be implicitly 
registered with that one. 

If so, continue to step 5. 

- If not, Result-Code shall be set to DIAMETER_AUTHORIZATION_REJECTED. 

5. Check the User- Authorization-Type received in the request: 

If it is REGISTRATION or if User- Authorization-Type is absent from the request, the HSS shall check 
whether the UAR Flags indicate that this is an IMS Emergency Registration: 

If it is not, and the Public User Identity is allowed to roam in the visited network (if not Experimental- 
Result-Code shall be set to DIAMETER_ERROR _ROAMING_NOT_ALLOWED) and authorized to 
register (if not Result-Code shall be set to DIAMETER. AUTHORIZATION_REJECTED) then continue 
to step 6. 

If it is an IMS Emergency Registration, authorization shall be granted and the HSS shall not perform any 
check regarding roaming. Continue to step 6. 

If it is DE_REGISTRATION, the HSS may not perform any check regarding roaming. Continue to step 6. 

- If it is REGISTRATION_AND_CAP ABILITIES, the HSS shall check whether the UAR Flags indicate that 
this is an IMS Emergency Registration: 

If it is not, and the Public User Identity is allowed to roam in the visited network (if not Experimental- 
Result-Code shall be set to DIAMETER_ERROR _ROAMING_NOT_ALLOWED) and authorized to 
register (if not Result-Code shall be set to DIAMETER_AUTHORIZATION_REJECTED). The HSS shall 
return the Server-CapabiHties AVP, which enables the I-CSCF to select an S-CSCF. If an S-CSCF is 
already assigned in the HSS and IMS Restoration Procedures are supported in the HSS, the HSS shall set 
the S-CSCF reassignment pending flag and shall allow overwriting of the S-CSCF name in the next SAR 
request. The returned capabilities must satisfy all the requirements of all the service profiles associated with 
the IMS Subscription. The Server-Capabilities AVP may be absent, to indicate to the I-CSCF that it can 
select any available S-CSCF. Result-Code shall be set to DIAMETER_SUCCESS. The HSS shall not 
return any S-CSCF name. Stop processing. 

If it is an IMS Emergency Registration, authorization shall be granted and the HSS shall not perform any 
check regarding roaming. The HSS shall return the Server-Capabilities AVP, which enables the I-CSCF to 
select an S-CSCF. The returned capabilities must satisfy all the requirements of all the service profiles 
associated with the IMS Subscription. The Server-Capabilities AVP may be absent, to indicate to the I- 
CSCF that it can select any available S-CSCF. Result-Code shall be set to DIAMETER_SUCCESS. The 
HSS shall not return any S-CSCF name. Stop processing. 

6. Check the state of the Public User Identity received in the request: 

If it is registered, the HSS shall return the stored S-CSCF name. No S-CSCF capabilities shall be present in 
the response. If User- Authorization-Type is equal to REGISTRATION or is absent, Experimental-Result- 
Code shall be set to DIAMETER_SUBSEQUENT_REGISTRATION. If User- Authorization-Type is equal 
to DE-REGISTRATION, Result-Code shall be set to DIAMETER_SUCCESS. 

If it is unregistered (i.e. registered as a consequence of an originating or terminating request or there is an S- 
CSCF keeping the user profile stored) and User-Authorization-Type is equal to DE-REGISTRATION, the 
HSS shall return the stored S-CSCF name and the Result-Code shall be set to DIAMETER_SUCCESS. If the 
User-Authorization-Type is equal to REGISTRATION or is absent, then the HSS shall return the stored S- 
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CSCF name and the Experimental-Result-Code set to DIAMETER_SUBSEQUENT_REGISTRATION. The 
HSS shall not return any S-CSCF capabilities. 

If it is not registered yet, the HSS shall check the value of User- Authorization-Type received in the request: 

If the value of User- Authorization-Type is DE_REGISTRATION and the Authentication pending flag is 
set, the HSS shall return the stored S-CSCF name and Experimental-Result-Code set to 
DIAMETER_SUCCESS. The HSS shall not return any S-CSCF capabilities. Otherwise, if Authentication 
pending flag is not set, the HSS shall not return any S-CSCF name or S-CSCF capabilities. The HSS 
shall set the Experimental-Result-Code to DIAMETER_ERROR_IDENTITY_NOT_REGISTERED in 
the response. 

If the value of User- Authorization-Type is REGISTRATION or is absent, then the HSS shall check if 
there is at least one Public User Identity within the IMS Subscription with an S-CSCF name assigned. 

If there is at least one Public User Identity within the IMS Subscription that is registered, the HSS 
shall return the S-CSCF name assigned for that Public User Identity and Experimental-Result-Code 
set to DIAMETER_SUBSEQUENT_REGISTRATION. The HSS shall not return any S-CSCF 
capabihties. 

If there is at least one Public User Identity within the IMS Subscription that is unregistered (i.e 
registered as a consequence of an originating or terminating request or there is an S-CSCF keeping the 
user profile stored), then the HSS shall return the stored S-CSCF name and the Experimental-Result- 
Code set to DIAMETER_SUBSEQUENT_REGISTRATION. The HSS shall not return any S-CSCF 
capabilities. 

If there is no identity of the user within the same IMS Subscription that is registered or unregistered, 
the HSS shall check if there is an S-CSCF name stored for the user (e.g. the user is being 
authenticated by the S-CSCF as indicated by the Authentication pending flag). If it is, the HSS shall 
return the stored S-CSCF name and Experimental-Result-Code set to 
DIAMETER_SUBSEQUENT_REGISTRATION. The HSS shall not return any S-CSCF capabilities. 

If there is not any Public User Identity within the IMS Subscription with an S-CSCF name assigned, 
then the HSS shall return the Server-Capabilities AVP, which enables the I-CSCF to select an S- 
CSCF. The returned capabilities shall satisfy all the requirements of all the service profiles associated 
with the IMS Subscription. The Server-Capabilities AVP may be absent, to indicate to the I-CSCF 
that it may select any available S-CSCF. Experimental-Result-Code shall be set to 
DIAMETER_FIRST_REGISTRATION. The HSS shall not return any S-CSCF name. 

If the HSS cannot fulfil received request, e.g. due to database error, it shall set Result-Code to 
DIAMETER_UNABLE_TO_COMPLY. No S-CSCF name or S-CSCF capabihties shall be present in the response. 

6.1 .2 S-CSCF registration/deregistration notification 

This procedure is used between the S-CSCF and the HSS. The procedure is invoked by the S-CSCF, corresponds to the 
combination of the operations Cx-Put and Cx-Pull (see 3GPP TS 23.228 [1]) and is used: 

To assign an S-CSCF to a Public Identity, or to clear the name of the S-CSCF assigned to one or more Public 
Identities. 

To download from HSS the relevant user information for the S-CSCF. 

- To backup and retrieve the S-CSCF Restoration Information (see 3GPP TS 23.380 [19]) in the HSS. 

This procedure is mapped to the commands Server- Assignment-Request/ Answer in the Diameter application specified 
in 3GPP TS 29.229 [5]. Tables 6.1.2.1 and 6.1.2.2 describe the involved information elements. 
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Table 6.1.2.1 : S-CSCF registration/deregistration notification request 



Information 
element name 


Mapping to 
Diameter AVP 


Cat. 


Description 


Public User 
Identity / 
Public Service 
Identity 
(See 7.2 and 
7.2a) 


Public-Identity 


C 


Public Identity or list of Public Identities. 

One and only one Public Identity shall be present if the Server-Assignment- 
Type is any value other than TIMEOUT DEREGISTRATION, 
USER DEREGISTRATION, DEREGISTRATION TOO MUCH DATA, 
TIMEOUT DEREGISTRATION STORE SERVER NAME, 
USER DEREGISTRATION STORE SERVER NAME or 
ADMINISTRATIVE_DEREGISTRATION. 

If Server-Assignment-Type indicates deregistration of some type and 
Private Identity is not present in the request, at least one Public Identity 
shall be present. 


S-CSCF Name 
(See 7.4) 


Server-Name 


M 


Name of the S-CSCF. 


Private User 

Identity / 

Private 

Service 

Identity 

(See 7.3 and 

7.3a) 


User-Name 


C 


Private Identity. 

It shall be present if it is available when the S-CSCF issues the request. 
It may be absent during the initiation of a session to an unregistered Public 
Identity. In such situation, Server-Assignment-Type shall contain the value 
UNREGISTERED_USER. 

In case of de-registration, Server-Assignment-Type equal to 
TIMEOUT DEREGISTRATION, ADMINISTRATIVE DEREGISTRATION, 
DEREGISTRATION TOO MUCH DATA or 

TIMEOUT_DEREGISTRATION_STORE_SERVER_NAME if no Public- 
Identity AVPs are present then User-Name AVP shall be present. 


Server 
Assignment 
Type 
(See 7.8) 


Server- 

Assignment- 

Type 


M 


Type of update that the S-CSCF requests in the HSS (e.g: de-registration). 
See 3GPP TS 29.229 [5] for all the possible values. 


User Data 
Already 
Available 
(See 7.16) 


User-Data- 

Already- 

Available 


M 


This indicates if the user profile is already available in the S-CSCF. 
In the case where Server-Assignment-Type is not equal to 
NO ASSIGNMENT, REGISTRATION, RE REGISTRATION or 
UNREGISTERED_USER, the HSS shall not use User Data Already 
Available when processing the request. 


Routing 
Information 
(See 7.13) 


Destination- 
Host 


C 


If the S-CSCF knows the HSS name, the Destination-Host AVP shall be 
present in the command. 

This information is available if the request belongs to an already existing 
registration, e.g. in case of the re-registration, where the HSS name is 
stored in the S-CSCF. The HSS name is obtained from the Origin-Host 
AVP, which is received from the HSS, e.g. included in the MAA command. 
This information may not be available if the command is sent as a 
consequence of a session termination for an unregistered Public Identity. In 
this case the Destination-Host AVP is not present and the command is 
routed to the next Diameter node, e.g. SLF, based on the Diameter routing 
table in the S-CSCF. 


Wildcarded 
Public Identity 
(See 7.2b) 


Wildcarded- 
Public-ldentity 





If the request refers to a Wildcarded PSI or Wildcarded Public User Identity, 

and the Server-Asignment-Type is set to UNREGISTERED USER, 

NO ASSIGNMENT, 

TIMEOUT DEREGISTRATION STORE SERVER NAME, 

ADMINISTRATIVE DEREGISTRATION, 

DEREGISTRATION TOO MUCH DATA or 

TIMEOUT_DEREGISTRATION, the S-CSCF may include the 

corresponding Wildcarded PSI or Wildcarded Public User Identity in this 

information element. 

If this element is present, it shall be used by the HSS to identify the identity 

affected by the request. The terms Public Identity or Public Service Identity 

in the detailed behaviour refer then to the Wildcarded Public Identity. 


S-CSCF 
Restoration 
Information 
(See 7.21) 


SCSCF- 

Restoration- 

Info 


C 


When the S-CSCF supports IMS Restoration Procedures, if Server- 
Assignment-Type is REGISTRATION or RE_REGISTRATION, and any of 
the related restoration information changed compared to the previous one, 
the S-CSCF shall send this information element to the HSS. This 
information allows a later retrieval in case of an S-CSCF service 
interruption. 
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IVIultiple- 
Registration- 
Indication 
(See 7.23) 


IVIultiple- 

Registration- 

Indication 


C 


When the S-CSCF supports IMS Restoration Procedures, if Server- 
Assignment-Type is REGISTRATION and the registration is a multiple 
registration, and the Public User Identity is not stored as registered with the 
Private User Identity as in the request in the S-CSCF, the S-CSCF shall 
send this information element to the HSS. 


Session- 
Priority 
(See 7.24) 


Session- 
Priority 





This information element shall indicate the session's priority to the HSS. If it 
is not included, the request shall be treated as normal. 
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Table 6.1.2.2: S-CSCF registration/deregistration notification response 



Information 
element name 


Mapping to 
Diameter AVP 


Cat. 


Description 


Private User 

Identity / 

Private 

Service 

Identity 

(See 7.3 and 

7.3a) 


User-Name 


C 


Private Identity. 

It shall be present if it is available when the HSS sends the response. 
It may be absent in the following error case: when the Server-Assignment- 
Type of the request is UNREGISTERED_USER and the received Public 
Identity is not known by the HSS. 


Registration 
result 
(See 7.6) 


Result-Code / 
Experimental- 
Result 


M 


Result of registration. 

Result-Code AVP shall be used for errors defined in the Diameter Base 

Protocol. 

Experimental-Result AVP shall be used for Cx/Dx errors. This is a grouped 

AVP which contains the 3GPP Vendor ID in the Vendor-Id AVP, and the 

error code in the Experimental-Result-Code AVP. 


User Profile 
(See 7.7) 


User-Data 


C 


Relevant user profile. 

It shall be present when Server-Assignment-Type in the request is equal to 
NO_ASSIGNMENT, REGISTRATION, RE_REGISTRATION or 
UNREGISTERED_USER according to the rules defined in section 6.6. 
If the S-CSCF receives more data than it is prepared to accept, it shall 
perform the de-registration of the Private Identity with Server-Assignment- 
Type set to DEREGISTRATION_TOO_MUCH_DATA and send back a SIP 
3xx or 480 (Temporarily Unavailable) response, which shall trigger the 
selection of a new S-CSCF by the l-CSCF, as specified in 3GPP TS 24.229 
[8]. 


Charging 
Information 
(See 7.12) 


Charging- 
Information 


C 


Addresses of the charging functions. 

It shall be present when the User-Data AVP is sent to the S-CSCF. 
When this parameter is included, either the Primary-Charging-Collection- 
Function-Name AVP or the Primary-Event-Charging-Function-Name AVP 
shall be included. All other elements shall be included if they are available. 


Associated 

Private 

Identities 


Associated- 
Identities 





This AVP contains all Private Identities, which belong to the same IIVIS 

subscription as the Private Identity or Public Identity received in the SAR 

command. 

If the IIVIS subscription contains only single Private Identity this AVP shall 

not be present. 


Loose-Route 
Indication 


Loose-Route- 
Indication 


c 


This AVP indicates to the S-CSCF that loose-route mechanism shall be 

applied to the public identities contained in the user profile received from 

the HSS. 

If the loose-route mechanim is required, this AVP shall be present and set 

to LOOSE_ROUTE_REQUIRED. 

If the Loose-Route mechanism is not required, this AVP may be either 

absent or present. If present, it shall be set to 

LOOSE ROUTE NOT REOUIRED. 


S-CSCF 
Restoration 
Information 
(See 7.21) 


SCSCF- 

Restoration- 

Info 


c 


This information shall be present if it was stored by the S-CSCF in the HSS 

and Server-Assignment-Type is either UNREGISTERED USER or 

NO_ASSIGNMENT. 

This information shall also be present if it was stored by the S-CSCF in the 

HSS and the SAR indicates it is related to a multiple registration and 

Server-Assignment-Type is REGISTRATION. 


Associated 
Registered 
Private 
Identities 
(See 7.22) 


Associated- 
Registered- 
Identities 


c 


This AVP contains all Private Identities that were registered with the Public 

Identity received in the SAR command. 

The HSS shall send this information element if the IIVIS Restoration 

Procedures are supported and the value of Server-Assignment-Type in the 

request is REGISTRATION or RE_REGISTRATION and there are other 

Private Identities different from the Private Identity received in the SAR 

command being registered with the Public Identity received in the SAR 

command. 

Otherwise, this AVP shall not be present. 


S-CSCF Name 
(See 7.4) 


Server-Name 


c 


Name of the assigned S-CSCF. 

This AVP shall be present, if the requesting S-CSCF name is different from 

the previously assigned S-CSCF name stored in the HSS. 
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6.1.2.1 Detailed behaviour 

On registering/deregistering a Public Identity the S-CSCF shall inform the HSS. The same procedure is used by the S- 
CSCF to get the user information which contains the user profile and the charging information. The relevant user profile 
downloaded is described in more detailed in sections 6.5.1 and 6.6. 

The Public-Identity AVP and User-Data AVPs in this command pair shall contain only one type of identities i.e. either 
only Public User Identities, or only Public Service Identities. User initiated Rregistration/deregistration procedures (i.e. 
server-assignment-type is set to RE_REGISTRATION, USER_DEREGISTRATION, etc.) shall only be allowed for 
distinct Public User Identities. 

The HSS holds information about the state of registration of all the identities related to an IMS Subscription. The S- 
CSCF uses this procedure to update such states. For Shared Public User Identities, the S-CSCF shall initiate this 
procedure towards the HSS for each Private User Identity undergoing a Registration or Deregistration related to the 
Shared Public User Identity. For implicitly registered identities, the rules defined in Section 6.5.1 shall apply. 

When the request message was received because of a terminating session request, the HSS may prioritise the received 
request message according to priority level received within the Session-Priority AVP. 

The HSS shall, in the following order (in case of an error in any of the steps the HSS shall stop processing and return 
the corresponding error code, see 3GPP TS 29.229 [5]): 

1. Check that the Public Identity and Private Identity exist in the HSS. If not Experimental-Result-Code shall be set 
to DIAMETER_ERROR_USER_UNKNOWN. 

2. The HSS may check whether the Private and Public Identities received in the request are associated in the HSS. 
If not Experimental-Result-Code shall be set to DIAMETER_ERROR_IDENTITIES_DONT_MATCH. 

3. If more than one Public-Identity AVP is present and the Server- Assignment-Type is one of the values defined in 
Table 6.1.2.1 as applying for only one identity, then the Result Code shall be set to 

DIAMETER. A VP_OCCURS_TOO_MANY_TIMES and no user information shall be returned. 

4. The HSS shall check the Public Identity type received in the request. 

If the identity in the request is a distinct Public User Identity, continue in step 5, otherwise the HSS shall 
check the server-assignment-type: 

If it indicates REGISTRATION, RE_REGISTRATION, USER_DEREGISTRATION, 
USER_DEREGISTRATION_STORE_SERVER_NAME, AUTHENTICATION_FAILURE or 
AUTHENTICATION_TIMEOUT, Experimental-Result-Code shall be set to 
DIAMETER_ERROR_IN_ASSIGNMENT_TYPE. 

If the identity in the request is a Public Service Identity, then check if the PSI Activation State for that 
identity is active. If not, then the response shall contain Experimental-Result-Code set to 
DIAMETER_ERROR_USER_UNKNOWN. 

5. Check the Server Assignment Type value received in the request: 

- If it indicates REGISTRATION or RE_REGISTRATION, the HSS shall check whether the Public Identity is 
assigned for the S-CSCF requesting the data. 

If there is already an S-CSCF assigned to the user and the requesting S-CSCF is not the same as the 
previously assigned S-CSCF, and IMS restoration procedures are not supported or the S-CSCF reassignment 
pending flag is not set, the HSS shall include the name of the previously assigned S-CSCF in the response 
message and the Result-Code shall be set to 
DIAMETER_ERROR_IDENTITY_ALREADY_REGISTERED. 

If there is already an S-CSCF assigned to the user and the requesting S-CSCF is not the same as the 
previously assigned S-CSCF and IMS restoration procedures are supported, and the S-CSCF reassignment 
pending flag is set, the HSS shall overwrite the S-CSCF name and shall reset the S-CSCF reassignment 
pending flag. 

If there is no S-CSCF assigned to the user or the the requesting S-CSCF is the same as the previously 
assigned S-CSCF stored in the HSS, the HSS shall download the relevant user information taking into 
consideration the value set in the User-Data-Already-Available AVP (see sub-clause 6.6). The Result-Code 
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shall be set to DIAMETER_SUCCESS and the HSS shall set the registration state of the Public User Identity 
as registered (if not already registered) .If the S-CSCF Restoration Information is included in the request and 
the HSS implements IMS Restoration procedures, and if it is RE_REGISTRATION, the HSS shall store this 
information. If the Public User Identity's authentication pending flag which is specific for the Private User 
Identity is set, the HSS shall clear it. If there are multiple Private User Identities, which belong to the served 
IMS subscription the Associated-Identities AVP should be added to the answer message and it shall contain 
all Private User Identities associated to the IMS subscription. If the loose-route mechanism is required for the 
registered Public User Identities, the Loose-Route-Indication AVP shall be added to the answer message. If 
there are multiple Private User Identities being registered with the Public Identity received in the request 
message, and the IMS Restoration Procedures are supported in the HSS, the Associated-Registered-Identities 
AVP shall be added to the answer message and it shall contain all Private User Identities being registered 
with the Public Identity. 

If it is REGISTRATION and the HSS implements IMS Restoration procedures, if multiple registration 
indication is included in the request and the Public User Identity is stored as registered in the HSS, and there 
is restoration information related to the Private User Identity, the HSS shall not overwrite the stored S-CSCF 
Restoration Information, instead, it shall send the stored S-CSCF restoration information together with the 
user profile in the SAA. The result code shall be set to DIAMETER_ERROR_IN_ASSIGNMENT_TYPE. 
Otherwise, the HSS shall store the received S-CSCF restoration information. The Result-Code shall be set to 
DIAMETER_SUCCESS. 

- If it indicates UNREGISTERED_USER, the HSS shall check whether the Public Identity is assigned for the 
S-CSCF requesting the data. 

If there is already an S-CSCF assigned to the user and the requesting S-CSCF is not the same as the 
previously assigned S-CSCF, and IMS restoration procedures are not supported or the S-CSCF reassignment 
pending flag is not set, the HSS shall include the name of the previously assigned S-CSCF in the response 
message and the Result-Code shall be set to 
DIAMETER_ERROR_IDENTITY_ALREADY_REGISTERED. 

If there is already an S-CSCF assigned to the user and the requesting S-CSCF is not the same as the 
previously assigned S-CSCF and IMS restoration procedures are supported, and the S-CSCF reassignment 
pending flag is set, the HSS shall overwrite the S-CSCF name and shall reset the S-CSCF reassignment 
pending flag. 

If there is no S-CSCF assigned to the user or the the requesting S-CSCF is the same as the previously 
assigned S-CSCF stored in the HSS, the HSS shall store the S-CSCF name. 

If the registration state of the Public Identity is not registered, the HSS shall set the registration state of the 
Public Identity as unregistered, i.e. registered as a consequence of an originating or terminating request and 
download the relevant user information. The Result-Code shall be set to DIAMETER_SUCCESS. If there are 
multiple Private User Identities associated to the Public User Identity in the HSS, the HSS shall arbitrarily 
select one of the Private User Identities and put it into the response message. 

If the registration state of the Public Identity is registered and IMS restoration procedures are not supported, 
the HSS shall set the registration state of the Public identity as unregistered and download the relevant user 
information. The Result-Code shall be set to DIAMETER_SUCCESS. If there are multiple Private User 
Identities associated to the Public User Identity in the HSS, the HSS shall arbitrarily select one of the Private 
User Identities and put it into the response message. 

If the registration state of the Public Identity is registered and IMS restoration procedures are supported, the 
HSS shall include in the response all S-CSCF Restoration Information related with the Public User Identity. 
If there is S-CSCF Restoration Information associated with several Private User Identities, the HSS shall 
include all the S-CSCF Restoration Information groups in the response. The Result-Code shall be set to 
DIAMETER_ERROR_IN_ASSIGNMENT_TYPE. 

If there are multiple Private User Identities, which belong to the served IMS subscription the Associated- 
Identities AVP should be added to the answer message and it shall contain all Private User Identities 
associated to the IMS subscription. 

If the S-CSCF receives a wildcarded public identity from the I-CSCF, the S-CSCF shall use this wildcarded 
public identity to fetch the user profile (i.e. by sending a Cx-S AR including Wildcarded-Public-Identity AVP 
if the profile is not available) and registration information locally stored. If the S-CSCF does not receive a 
wildcarded public identity from the I-CSCF, the S-CSCF shall not use a wildcarded public identity and shall 
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use the distinct identity received instead to fetch the user profile (e.g. by sending a Cx-SAR without 
including Wildcarded-Public-Identity AVP) and registration information. 

NOTE: Since a distinct public identity falling into the range of a wildcarded public identity can have a different 
service profile, the S-CSCF does not perform the wildcarded public identity matching to avoid using the 
wrong service profile. 

- If it indicates TIMEOUT_DEREGISTRATION, USER_DEREGISTRATION, 
DEREGISTRATION_TOO_MUCH_DATA or ADMINISTRATIVE_DEREGISTRATION, the HSS shall 
check the registration state for all the Public Identities in the request. If the request did not contain Public 
Identities the HSS shall check the registration state of the Public Identities associated with the Private 
Identity identified in the request. For each Public Identity;- 

if the registration state of the Public User Identity is Registered, the HSS shall check if the Public User 
Identity is currently registered with one or more Private User Identities. 

If the Public User Identity is currently registered with only one Private User Identity, the HSS shall set 
the registration state of the Public User Identity to Not Registered and clear the S-CSCF name and any 
S-CSCF Restoration Information associated with the Public User Identity. 

If the Public User Identity is currently registered with more than one Private User Identity, the HSS 
shall keep the registration state of the Public User Identity as Registered and retain the S-CSCF name 
associated with the Public User Identity. The HSS shall remove any S-CSCF Restoration Information 
associated to the registration of this Public User Identity with this Private User Identity. 

if the registration state of the Public Identity is Unregistered, the HSS shall set the registration state of the 
Public Identity to Not Registered and clear the S-CSCF name associated with the Public Identity. 

The Result-Code shall be set to DIAMETER_SUCCESS 

- If it indicates TIMEOUT_DEREGISTRATION_STORE_SERVER_NAME or 
USER_DEREGISTRATION_STORE_SERVER_NAME the HSS decides whether to keep the S-CSCF 
name associated to the Private User Identity stored or not for all the Public User Identities that the S-CSCF 
indicated in the request. If no Public User Identity is present in the request, the Private User Identity shall be 
present. 

- If the HSS decides to keep the S-CSCF name stored the HSS shall keep the S-CSCF name stored for all 
the Public User Identities associated to the Private User Identity. The Result-Code shall be set to 
DIAMETER_SUCCES S . 

The HSS shall check if each Public User Identity in the request is currently registered with one or more 
Private User Identities. If the request did not contain Public User Identities the HSS shall check if each 
Public User Identity associated with the Private User Identity in the request is currently registered with 
one or more Private User Identities. For each Public User Identity;- 

If only one Private User Identity associated with the Public User Identity is currently registered with 
the Public User Identity, the HSS shall set the registration state of the Public User Identity to 
Unregistered and clear any S-CSCF Restoration Information associated with the Public User Identity 

If more than one Private User Identity that shares that Public User Identity is currently registered with 
the Public User Identity the HSS shall keep the registration state of the Public User Identity as 
Registered. The HSS shall remove any S-CSCF Restoration Information associated to the registration 
of this Public User Identity with the Private User Identity in the request. 

If the HSS decides not to keep the S-CSCF name the Experimental-Result-Code shall be set to 
DIAMETER_SUCCESS_SERVER_NAME_NOT_STORED. 

The HSS shall check if each Public User Identity in the request is currently registered with one or more 
Private User Identities. If the request did not contain Public User Identities the HSS shall check if each 
Public User Identity associated with the Private User Identity in the request is currently registered with 
one or more Private User Identities. For each Public User Identity;- 

If only one Private User Identity associated with the Public User Identity is currently registered with 
the Public User Identity, the HSS shall set the registration state of the Public User Identity to Not 
Registered and clear the S-CSCF name associated with Public User Identity. 
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If more than one Private User Identity that shares that Public User Identity is currently registered with 
the Public User Identity the HSS shall keep the registration state of the Public User Identity as 
Registered. 

- If it indicates NO_ASSIGNMENT, the HSS checks whether the PubUc Identity is assigned for the S-CSCF 
requesting the data. If the requesting S-CSCF is not the same as the assigned S-CSCF and the S-CSCF 
reassignment pending flag is not set, the Result-Code shall be set to DIAMETER_UNABLE_TO_COMPLY, 
otherwise the HSS shall download the relevant user information and the Result-Code shall be set to 
DIAMETER_SUCCESS. If relevant S-CSCF Restoration Information is stored in the HSS and IMS 
Restoration Procedures are supported, it shall be added to the answer message. If there is S-CSCF 
Restoration Information associated with several Private User Identities, the HSS shall include all the S-CSCF 
Restoration Information groups in the response. If there are multiple Private User Identities, which belong to 
the served IMS subscription the Associated-Identities AVP should be added to the answer message and it 
shall contain all Private User Identities associated to the IMS subscription. 

NOTE: the check of the S-CSCF reassignment pending flag is needed since an S-CSCF supporting restoration 

procedures can receive a user initiated de-registration for a Public Identity for which it does not have any 
registration data (see 3GPP TS 23.380 [19]). In such case, the S-CSCF indicates NO_ASSIGNMENT in 
Server- Assignment-Type to retrieve any possible restoration information from the HSS. 

If it indicates AUTHENTICATION_FAILURE (e.g. there is a mismatch in IP-address secure binding 
information) or AUTHENTICATION_TIMEOUT (e.g. no response to Digest challenge), the HSS shall keep 
the registration state of the Public User Identity. The HSS shall check the registration state for the Public 
User Identity in the request and only if the registration state of the Public User Identity is Not Registered, the 
HSS shall clear the S-CSCF name associated with the Public User Identity. 

If the Public User Identity's authentication pending flag which is specific for the Private User Identity is set, 
the HSS shall clear it. The Result-Code shall be set to DIAMETER_SUCCESS. 

If the HSS cannot fulfil the received request, e.g. due to database error, it shall set the Result-Code to 
DIAMETER_UNABLE_TO_COMPLY. The HSS shall not modify any registration state nor download any Public 
Identity information to the S-CSCF. 

See chapter 8.1.2 and 8.1.3 for the description of the handling of the error situations: reception of an S-CSCF name 
different from the one stored in the HSS and reception of a Server- Assignment-Type value not compatible with the 
registration state of the Public Identity. 

6.1 .3 Network initiated de-registration by tine HSS, administrative 

In case of network initiated de-registration of by the HSS, the HSS change the state of the Public Identities to Not 
Registered and send a notification to the S-CSCF indicating the identities that shall be de-registered. The procedure is 
invoked by the HSS, corresponds to the functional level operation Cx-Deregister (see 3GPP TS 23.228 [1]). 

This procedure is mapped to the commands Registration-Termination-Request/ Answer in the Diameter application 
specified in 3GPP TS 29.229 [5]. Tables 6.1.3.1 and 6.1.3.2 describe the involved information elements. 
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Table 6.1.3.1 : Network Initiated Deregistration by HSS request 



Information 
element name 


IVIapping to 
Diameter AVP 


Cat. 


Description 


Public User 
Identity / 
Public Service 
Identity 
(See 7.2 and 
7.2a) 


Public-Identity 


C 


It contains the list of Public Identities that are de-registered, in the form of 

SIP URL or TEL URL. 

Public-Identity AVP shall be present if the de-registration reason code is 

NEW_SERVER_ASSIGNED. It may be present with the other reason 

codes. 


Private User 

Identity / 

Private 

Service 

Identity 

(See 7.3 and 

7.3a) 


User-Name 


M 


It contains the Private Identity in the form of a NAI. The HSS shall always 
send a Private Identity that is known to the S-CSCF based on an earlier 
SAR/SAA procedure. 


Reason for de- 
registration 
(See 7.11) 


Deregistration- 
Reason 


M 


The HSS shall send to the S-CSCF a reason for the de-registration. The 
de-registration reason is composed of two parts: one textual message (if 
available) that is intended to be forwarded to the user that is de-registered, 
and one reason code (see 3GPP TS 29.229 [5]) that determines the 
behaviour of the S-CSCF. 


Routing 
Information 
(See 7.13) 


Destination- 
Host 


M 


It contains the name of the S-CSCF which originated the last update of the 
name of the multimedia server stored in the HSS for a given IMS 
Subscription. The address of the S-CSCF is the same as the Origin-Host 
AVP in the message sent from the S-CSCF. 


Associated 

Private 

Identities 


Associated- 
Identities 





This AVP contains Private Identities, which belong to the same IMS 
subscription as the Private Identity in the User-Name AVP and should be 
de-registered together with that one. 

If the IMS subscription contains only a single Private Identity, this AVP shall 
not be present. 



Table 6.1.3.2: Network Initiated Deregistration by HSS response 



Information 
element name 


IVIapping to 
Diameter AVP 


Cat. 


Description 


Result 
(See 7.6) 


Result-Code / 
Experimental- 
Result 


M 


This information element indicates the result of de-registration. 

Result-Code AVP shall be used for errors defined in the Diameter Base 

Protocol. 

Experimental-Result AVP shall be used for Cx/Dx errors. This is a grouped 

AVP which contains the 3GPP Vendor ID in the Vendor-Id AVP, and the 

error code in the Experimental-Result-Code AVP. 


Associated 

Private 

Identities 


Associated- 
Identities 


C 


This AVP shall be present if the S-CSCF de-registered more than one 
Private Identity with the request. It contains all Private Identities that have 
been deregistered together with the one in the User-Name AVP of the 
request. 



6.1.3.1 



Detailed behaviour 



The HSS shall de-register the affected identities and invoke this procedure to inform the S-CSCF. The S-CSCF shall 
remove all the information stored in the S-CSCF for the affected identities. 

The HSS may de-register: 

One Public Identity or a list of Public Identities. HSS may include all Public User Identities associated with the 
User-Name AVP to the request. This option is applicable with all reason codes. 

One or more Private Identities of the IMS Subscription with all associated Public Identities. No Public -Identity 
AVPs shall be present in this case. This option is applicable with reason codes 
PERMANENT_TERMINATION, SERVER_CHANGE, and REMOVE_S-CSCF. 

All Public Service Identities that match a Wildcarded Public Service Identity. In this case the HSS may send one 
of the Public Service Identities that was received in the Server Assignment Request for that Wildcarded Public 
Service Identity and the associated Private Service Identity. 
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A Wildcarded Public User Identity. In this case the HSS shall send a distinct Public User Identity that belongs to 
the same implicit registration set as the Wildcarded Public User Identity and the associated Private User Identity. 

The HSS shall send in the Deregistration-Reason AVP the reason for the de-registration, composed by a textual 
message (if available) aimed for the user and a reason code that determines the action the S-CSCF has to perform. The 
possible reason codes are: 

- PERMANENT_TERMINATION: The HSS indicates to the S-CSCF that the S-CSCF will no longer be assigned 
to the Public Identity and associated implicitly registered Public Identities for the Private Indentity(ies) indicated 
in the request (e.g. due to an IMS subscription modification or a removal of IP-address secure binding 
information when GIBA is used). 

The HSS shall check the registration state of the Public Identities. If no Public Identities are involved, the HSS 
shall check the registration state of the Public Identities associated with the Private User Identity identified. For 
each Public Identity: 

If the registration state of the Public Identity is Registered, the HSS shall check if the Public User Identity 
is currently registered with one or more Private User Identities. 

If the Public User Identity is currently registered with only one Private User Identity, the HSS shall set 
the registration state of the Public User Identity to Not Registered and clear the S-CSCF name 
associated with the Public User Identity. The S-CSCF initiates the de-registration of the Public User 
Identity. 

If the Public User Identity is currently registered with more than one Private User Identity, the HSS 
shall keep the registration state of the Public User Identity as Registered and retain the S-CSCF name 
associated with the Public User Identity. The S-CSCF initiates the de-registration of the Public User 
Identity. 

- If the registration state of the Public Identity is Unregistered, the HSS shall set the registration state of the 
Public Identity to Not Registered and clear the S-CSCF name associated with the Public Identity. 

- NEW_SERVER_ASSIGNED: The HSS indicates to the S-CSCF that a new S-CSCF has been allocated to the 
IMS Subscription e.g. because the previous assigned S-CSCF was unavailable during a registration procedure. 
The S-CSCF shall remove all information for all of the Public Identities indicated in the request. 

- SERVER_CHANGE: The HSS indicates to the S-CSCF that the de-registration is requested to force the 
selection of new S-CSCF to assign to the IMS Subscription (e.g. when the S-CSCF capabilities are changed in 
the HSS or when the S-CSCF indicates that it has not enough memory for the updated User Profile). The HSS 
shall set the registration state to "Not Registered" and clear the S-CSCF name for all of the Public Identities 
affected by the request. If the S-CSCF does not indicate in the response all the Private Identities that were in the 
request, the HSS shall repeat this request for each of the remaining Private Identities in the IMS Subscription that 
are known to the S-CSCF. The S-CSCF should start the network initiated de-registration towards the user, i.e. all 
registrations within the IMS Subscription are de-registered and the user is asked to re-register to all existing 
registrations. 

- REMOVE_S-CSCF: The HSS indicates to the S-CSCF that the S-CSCF will no longer be assigned to an 
unregistered Public Identity(ies) (i.e registered as a consequence of an originating or terminating request or there 
is a S-CSCF keeping the user profile stored) for a given IMS Subscription. For each Public Identity contained 
within the request the HSS shall set the registration state of the Public Identity to Not Registered and clear the S- 
CSCF name associated with the Public Identity. The S-CSCF shall remove all information related to the Public 
User Identity contained within the request. 

The detailed de-registration procedures performed by the S-CSCF for each reason code are described in the 3GPP TS 

24.229 [8]. 

6.1 .4 User location query 

This procedure is used between the I-CSCF and the HSS to obtain the name of the S-CSCF assigned to a Public 
Identity, or the name of the AS hosting a PSI for direct routing. The procedure is invoked by the I-CSCF, is performed 
per Public Identity, and corresponds to the functional level operation Cx-Location-Query (see 3GPP TS 23.228 [1]). 

This procedure is mapped to the commands Location Info Request/Answer in the Diameter application specified in 
3GPP TS 29.229 [5]. Tables 6.1.4.1 and 6.1.4.2 detail the involved information elements. 



£75/ 



3GPP TS 29.228 version 10.1.0 Release 10 



24 



ETSI TS 129 228 VI 0.1.0 (2011-04) 



Table 6.1.4.1 : User Location query 



Information 
element name 


Mapping to 
Diameter AVP 


Cat. 


Description 


Public User 
Identity / 
Public Service 
Identity 
(See 7.2 and 
7.2a) 


Public-Identity 


M 


Public Identity 


Routing 
information 
(See 7.13) 


Destination- 
Host, 

Destination- 
Realm 


C 


If the l-CSCF knows HSS name Destination-Host AVP shall be present in 
the command. Otherwise, only Destination-Realm AVP shall be present 
and the command shall be routed to the next Diameter node, e.g. SLF, 
based on the Diameter routing table in the l-CSCF. 


Originating 
Request 
(See 7.18) 


Originating- 
Request 





It indicates that the request is related to an originating SIP message. 


Type of 
Authorization 
(See 7.14) 


User- 

Authorization- 

Type 


c 


This information element shall be present and set to 
REGISTRATION_AND_CAPABILITIES by the l-CSCF if IMS Restoration 
Procedures are supported and the S-CSCF currently assigned to the Public 
User Identity in the HSS cannot be contacted. 


Session 
Priority 
(See 7.24) 


Session- 
Priority 





This information element shall indicate the session's priority to the HSS. If it 
is not included, the request shall be treated as normal. 



Table 6.1.4.2: User Location response 



Information 
element name 


Mapping to 
Diameter AVP 


Cat. 


Description 


Result 
(See 7.6) 


Result-Code / 
Experimental- 
Result 


M 


Result of the operation. 

Result-Code AVP shall be used for errors defined in the Diameter Base 

Protocol. 

Experimental-Result AVP shall be used for Cx/Dx errors. This is a grouped 

AVP which contains the 3GPP Vendor ID in the Vendor-Id AVP, and the 

error code in the Experimental-Result-Code AVP. 


S-CSCF Name 
/ AS name 
(See 7.4 and 
7.4a) 


Server-Name 


C 


Name of the assigned S-CSCF for basic IMS routing or the name of the AS 
for direct routing. 


S-CSCF 
capabilities 
(See 7.5) 


Server- 
Capabilities 





It contains the information to help the l-CSCF in the selection of the S- 
CSCF. 


Wildcarded 
Public Identity 
(See 7.2b) 


Wildcarded- 
Public-ldentity 





If the requests refers to a Wildcarded PSI or Wildcarded Public User 
Identity (the Public Identity in the request matches a Wildcarded PSI or 
Wildcarded Public User Identity in the HSS), the HSS shall include the 
corresponding Wildcarded Public Identity in this information element. 

The matching of distinct Public Identies takes precedence over the 
matching of wildcarded public identities. 



6.1.4.1 



Detailed behaviour 



The HSS may prioritise the received request message according to priority level received within the Session-Priority 
AVP. 

The HSS shall, in the following order (if an error occurs in any of the steps the HSS shall stop processing and return the 
corresponding error code, see 3GPP TS 29.229 [5]): 

1 . Check that the Public Identity is known. If not the Experimental-Result-Code shall be set to 
DIAMETER_ERROR_USER_UNKNOWN. 

2. Check the type of the Public Identity contained in the request: 

If this is a Public User Identity, continue to step 2a. 
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- If this is a Public Service Identity: 

- Check if the PSI Activation State for that identity is active. If not, then the response shall contain 
Experimental-Result-Code set to DIAMETER_ERROR_USER_UNKNOWN. 

- Check if the name of the AS hosting the Public Service Identity is stored in the HSS and that the request 
does not contain the Originating-Request AVP. If this is the case the HSS shall return the AS name and 
the Result-Code AVP shall be set to DIAMETER_SUCCESS. Otherwise, continue to step 2a. 

2a. Check if User- Authorization-Type was received in the request, and if the value is 
REGISTRATION_AND_CAP ABILITIES : 

If it is, then the HSS shall return the Server-Capabilities AVP. If restoration procedures are supported, the 
HSS shall set the S-CSCF reassignment pending flag and allow overwriting of the S-CSCF name in the next 
SAR request, which enables the I-CSCF to select an S-CSCF. The returned capabilities must satisfy all the 
requirements of all the service profiles associated with the IMS Subscription. The Server-Capabilities AVP 
may be absent, to indicate to the I-CSCF that it can select any available S-CSCF. Result-Code shall be set to 
DIAMETER_SUCCESS. The HSS shall not return any S-CSCF name. Stop processing. 

Otherwise, continue to step 3. 

3. Check the state of the Public Identity received in the request, and where necessary, check if the Public Identity 
has terminating services related to the unregistered state. 

If it is registered, the HSS shall return the stored S-CSCF name. The Server-Name AVP shall contain the SIP 
URI of the server. The Server-Capabilities AVP shall not be present. The Result-Code AVP shall be set to 
DIAMETER_SUCCESS. 

If it is unregistered (i.e. registered as a consequence of an originating or terminating request or there is a S- 
CSCF keeping the user profile stored) the HSS shall return the S-CSCF name assigned for that Public 
Identity. The Server-Name AVP shall contain the SIP URI of the server. The Server-Capabilities AVP shall 
not be present. The Result-Code shall be set to DIAMETER_SUCCESS. 

If it is not registered, but either it has terminating services related to unregistered state or the request contains 
the Originating-Request AVP, the HSS shall check if there is at least one Public Identity within the IMS 
Subscription with an S-CSCF name assigned: 

- If this is the case the HSS shall return the S-CSCF name assigned for that Public Identity. The Server- 
Name AVP shall contain the SIP URI of the server. The Server-Capabilities AVP shall not be present. 
The Result-Code shall be set to DIAMETER_SUCCESS. 

If there is not any S-CSCF name assigned to a Public Identity within the IMS Subscription, the HSS may 
return information about the required S-CSCF capabilities, which enables the I-CSCF to select an S- 
CSCF. The Server-Capabilities AVP may be present. The HSS shall send the same server capability set 
that is sent in the user registration status response during the registration. If Server-Capabilities AVP is 
not present, the I-CSCF shall understand that any S-CSCF is suitable for the IMS Subscription. The 
Server-Name AVP shall not be present. The Experimental-Result-Code shall be set to 
DIAMETER_UNREGISTERED_SERVICE. 

If it is not registered or unregistered, and the Public Identity has no terminating services related to the 
unregistered state and the request does not contain the Originating-Request AVP, the response shall contain 
Experimental-Result-Code set to DIAMETER_ERROR_IDENTITY_NOT_REGISTERED. 

If the HSS cannot fulfil the received request, e.g. due to database error, it shall set Result-Code to 
DIAMETER_UNABLE_TO_COMPLY. No S-CSCF name or S-CSCF capabilities shall be present in the response. 

6.2 User data handling procedures 
6.2.1 User Profile download 

As part of the registration procedure (3GPP TS 23.228 [1]) S-CSCF obtains user data and service related information by 
means of the Cx-Put Resp operation (see 6.1.2). 
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6.2.2 HSS initiated update of User Profile 



This procedure is initiated by the HSS to update user profile information and/or charging information and/or SIP Digest 
authentication information in the S-CSCF. This procedure corresponds to the functional level operation Cx- 
Update_Subscr_Data (see 3GPP TS 23.228 [1]). 

This procedure is mapped to the commands Push-Profile-Request/ Answer in the Diameter application specified in 
3GPP TS 29.229 [5]. Tables 6.2.2.1 and 6.2.2.2 describe the involved information elements. 

Table 6.2.2.1 : User Profile Update request 



Information 
element name 


IVIapping to 
Diameter AVP 


Cat. 


Description 


Private User 

Identity / 

Private 

Service 

Identity 

(See 7.3 and 

7.3a) 


User-Name 


M 


Private Identity. 

The HSS shall always send a Private Identity that is known to the S-CSCF 

based on an earlier SAR/SAA procedure. 


User profile 
(See 7.7) 


User-Data 


C 


Updated user profile (see sections 6.5.2.1 and 6.6.1), with the format 
defined in chapter 7.7. 

It shall be present if the user profile is changed in the HSS. If the User-Data 
AVP is not present, the SIP-Auth-Data-ltem or Charging-lnformation AVP 
shall be present. 


Authentication 
Data (See 7.9) 


SIP-Auth- 
Data-ltem 


C 


SIP Digest authentication information. 

It shall be present if the used authentication scheme is SIP Digest and 

when password change has occurred in the HSS. If the SIP-Auth-Data-ltem 

AVP is not present, the Charging-lnformation or User-Data AVP shall be 

present. 

See Table 6.3.6 for the contents of this information element. 


Charging 
Information 
(See 7.12) 


Charging- 
Information 


c 


Addresses of the charging functions. 

It shall be present if the charging addresses are changed in the HSS. If the 
Charging-lnformation AVP is not present, the SIP-Auth-Data-ltem or User- 
Data AVP shall be present. 

When this parameter is included, either the Primary-Charging-Collection- 
Function-Name AVP or the Primary-Event-Charging-Function-Name AVP 
shall be included. All other charging information shall be included if it is 
available. 


Routing 
Information 
(See 7.13) 


Destination- 
Host 


M 


It contains the name of the S-CSCF which originated the last update of the 
name of the multimedia server stored in the HSS for a given IMS 
Subscription. The address of the S-CSCF is the same as the Origin-Host 
AVP in the message sent from the S-CSCF. 



Table 6.2.2.2: User Profile Update response 



Information 


IVIapping to 


Cat. 


Description 


element name 


Diameter AVP 






Result 


Result-Code / 


M 


This information element indicates the result of the update of User Profile in 


(See 7.6) 


Experimental- 




the S-CSCF. 




Result 




Result-Code AVP shall be used for errors defined in the Diameter Base 

Protocol. 

Experimental-Result AVP shall be used for Cx/Dx errors. This is a grouped 

AVP which contains the 3GPP Vendor ID in the Vendor-Id AVP, and the 

error code in the Experimental-Result-Code AVP. 



6.2.2.1 



Detailed behaviour 



The HSS shall make use of this procedure to update the relevant user information to the S-CSCF. The user information 
contains the user profile. See chapters 6.5.2. 1 and 6.6. 1 for the rules of user profile updating. If there are multiple 
registered Private User Identities associated to the Public User Identity in the HSS, the HSS shall send only single 
request and select arbitrarily one of the Private User Identities and put it into the request. For updates of the profile of a 
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Wildcarded Public Identity, the HSS shall send only one single request. That request shall contain the Wildcarded 
Public Identity (content within the Identity tag in the XML data shall be ignored by the S-CSCF). 

The Charging-Information AVP and/or the User-Data AVP shall be present in the request. If the User-Data AVP is 
present in the request, the S-CSCF shall overwrite, for the Public Identities indicated in the User profile included in the 
request, current information with the information received from the HSS, except in the error situations detailed in table 
6.2.2.1.1. If the Charging-Information AVP is present in the request, the S-CSCF shall replace the existing charging 
information with the information received from the HSS. 

The SIP-Auth-Data-Item AVP shall be present if the command is sent in order to update SIP Digest authentication 
information due to a password change. 

If the S-CSCF receives data that it can not recognise, unsupported user data in a part of the request where it may not be 
ignored or more data than it can accept, it shall return the corresponding error code to the HSS as indicated in table 
6.2.2.1.1. The S-CSCF shall not overwrite the data that it already has to give service to the IMS Subscription. The HSS 
shall initiate a network-initiated de-registration procedure towards the S-CSCF with Deregistration-Reason set to 
SERVER_CHANGE, which will trigger the assignment of a new S-CSCF. 

If the HSS receives DIAMETER_ERROR_USER_UNKNOWN from the S-CSCF in the Push-Profile-Answer, then the 
HSS shall re-send the request using another arbitrarily selected registered Private Identity (if any). If restoration 
procedures are not supported, the HSS shall set the unknown Private User Identity's registration status to "not 
registered"; this will allow the synchronization of the registration status in HSS and S-CSCF. 

NOTE: If restoration procedures are supported, restoration procedures will ensure synchronization of the 

registration status in HSS and S-CSCF, i.e. the S-CSCF can either immediately retrieve the S-CSCF 
restoration information for the registered Public User Identity (sending SAR with Server Assignment 
Type set to NO_ASSIGNMENT), or wait for reception of a SIP request. 



Table 6.2.2.1.1 details the valid result codes that the S-CSCF can return in the response. 

Table 6.2.2.1.1 : User profile response valid result codes 



Result-Code AVP value 


Condition 


DIAMETER SUCCESS 


The request succeeded. 


DIAMETER_ERROR_NOT_SUPPORTED_USER_DATA 


The request failed. The S-CSCF Informs the HSS that 
the received user Information contained Information, 
which was not recognised or supported by the S-CSCF 
due to unsupported S-CSCF capabilities. 


DIAMETER_ERROR_USER_UNKNOWN 


The request failed because the Private Identity is not 
found in S-CSCF. 


DIAMETER_ERROR_TOO_MUCH_DATA 


The request failed. The S-CSCF Informs to the HSS that 
It tried to push too much data Into the S-CSCF. 


DIAMETER UNABLE TO COMPLY 


The request failed. 



6.3 Authentication procedures 



This procedure is used between the S-CSCF and the HSS to exchange information to support the authentication between 
the end user and the home IMS network. The procedure is invoked by the S-CSCF, corresponds to the combination of 
the operations Cx-AV-Req and Cx-AV-Req-Resp (see 3GPP TS 33.203 [3]) and is used: 

To retrieve authentication vectors from the HSS. 

To resolve synchronization failures between the sequence numbers in the UE and the HSS for authentication 
schemes that support this capability (e.g. IMS-AKA). 

To promote the result of the NASS-level authentication to the IMS level. 

To retrieve the IP-address secure binding information for GPRS-IMS-Bundled Authentication (GIBA) from the 
HSS. 
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This procedure is mapped to the commands Multimedia- Auth-Request/ Answer in the Diameter application specified in 
3GPP TS 29.229 [5]. Tables 6.3.1through 6.3.7 detail the involved information elements. Tables 6.3.1, 6.3.2 and 6.3.4 
are common to all authentication schemes; Tables 6.3.3 and 6.3.5 are specific to IMS-AKA authentication; Tables 6.3.6 
and 6.3.7 are specific to SIP Digest Authentication, when utilized. Table 6.3.8 is specific to NASS Bundled 
authentication, when utilized. Table 6.3.9 is specific to GPRS-IMS-Bundled Authentication (GIBA), when utilized. 

Table 6.3.1 : Authentication Request 



Information 
element name 


Mapping to 
Diameter AVP 


Cat. 


Description 


Public User 
Identity 
(See 7.2) 


Public-Identity 


M 


This information element contains the Distinct Public User Identity of the 
user 


Private User 
Identity 
(See 7.3) 


User-Name 


M 


This information element contains the Private User Identity 


Number 
Authentication 
Items 
(See 7.10) 


SIP-Number- 
Auth-ltems 


M 


This information element indicates the number of authentication vectors 
requested. Certain authentication schemes do not support more than one 
set of authentication vectors (e.g. SIP Digest, GIBA). 


Authentication 

Data 

(See 7.9) 


SIP-Auth- 
Data-ltem 


M 


See Tables 6.3.2 and 6.3.3 for the contents of this information element. 
The content shown in table 6.3.2 shall be used for a normal authentication 
request; the content shown in table 6.3.3 shall only be used for an IMS- 
AKA authentication request after synchronization failure. 


S-CSCF Name 
(See 7.4) 


Server-Name 


M 


This information element contains the name (SIP URL) of the S-CSCF. 


Routing 
Information 
(See 7.13) 


Destination- 
Host 


C 


If the S-CSCF knows the HSS name this AVP shall be present. 
This information is available if the IVIAR belongs to an already existing 
registration, e.g. in case of the re-registration, where the HSS name is 
stored in the S-CSCF. The HSS name is obtained from the Origin-Host 
AVP, which is received from the HSS, e.g. included in the MAA command. 
This information may not be available if the command is sent in case of the 
initial registration. In this case the Destination-Host AVP is not present and 
the command is routed to the next Diameter node, e.g. SLF, based on the 
Diameter routing table in the client. 



Table 6.3.2: Authentication Data content - Request 



Information 
element name 


Mapping to 
Diameter AVP 


Cat. 


Description 


Authentication 
Scheme 
(See 7.9.2) 


SIP- 

Authentication- 

Scheme 


M 


This information element indicates the authentication scheme. It shall 
contain: 

- "Digest-AKAv1-MD5" if the S-CSCF knows that IMS-AKA is to be used. 

- "SIP Digest" if the S-CSCF knows that SIP Digest is to be used. 

- "NASS-Bundled" if the S-CSCF knows that NASS Bundled authentication 
is to be used. 

- "Early-IMS-Security" if the S-CSCF knows that GPRS-IMS-Bundled 
Authentication is to be used. 

- "Unknown" if the S-CSCF can not know the authentication scheme at this 
point. 


Authentication 
Context 
(See 7.9.7) 


SIP- 

Authentication- 

Context 


C 


It shall contain authentication-related information relevant for performing 
the authentication. When Authentication Scheme contains "Digest-AKAvl - 
MD5", this AVP is not used and shall be missing. 



£75/ 



3GPP TS 29.228 version 10.1.0 Release 10 



29 



ETSI TS 129 228 VI 0.1.0 (2011-04) 



Table 6.3.3: Authentication Data content - Request: Synchronization Failure for IMS-AKA 



Information 
element name 


Mapping to 
Diameter AVP 


Cat. 


Description 


Authentication 
Scheme 
(See 7.9.2) 


SIP- 

Authentication- 

Scheme 


M 


Authentication scheme. It shall contain "Digest-AKAv1-MD5". 


Authorization 
Information 
(See 7.9.4) 


SIP- 
Authorization 


M 


It shall contain the concatenation of RAND, as sent to the terminal, and 
AUTS, as received from the terminal. RAND and AUTS shall both be binary 
encoded. See 3GPP TS 33.203 [3] for further details about RAND and 
AUTS. The Authorization Information has a fixed length of 30 octets; the 16 
most significant octets shall contain the RAND, the 14 least significant 
octets shall contain the AUTS. 



Table 6.3.4: Authentication Request Response 



Information 
element name 


Mapping to 
Diameter AVP 


Cat. 


Description 


User Identity 
(See 7.2) 


Public- 
Identity 


C 


Public User Identity. It shall be present when the result is 
DIAMETER_SUCCESS. 


Private User 
Identity 
(See 7.3) 


User-Name 


c 


Private User Identity. It shall be present when the result is 
DIAMETER_SUCCESS. 


Number 
Authentication 
Items 
(See 7.10) 


SIP-Number- 
Auth-Items 


c 


This AVP indicates the number of authentication vectors delivered in the 
Authentication Data information element. It shall be present when the result 
is DIAIVIETER_SUCCESS. For SIP Digest, NASS Bundled authentication 
and GIBA this AVP shall be set to a value of 1 . 


Authentication 

Data 

(See 7.9) 


SIP-Auth- 
Data-ltem 


c 


If the SIP-Number-Auth-ltems AVP is equal to zero or it is not present, then 

this AVP shall not be present. 

See Table 6.3.5 for the contents of this information element for IMS-AKA. 

See Table 6.3.6 for the contents of this information element for SIP Digest. 

See Table 6.3.8 for the contents of this information element for NASS 

Bundled authentication. 

See Table 6.3.9 for the contents of this information element for GIBA. 


Result 
(See 7.6) 


Result-Code / 
Experimental- 
Result 


M 


Result of the operation. 

Result-Code AVP shall be used for errors defined in the Diameter Base 

Protocol. 

Experimental-Result AVP shall be used for Cx/Dx errors. This is a grouped 

AVP which contains the 3GPP Vendor ID in the Vendor-Id AVP, and the 

error code in the Experimental-Result-Code AVP. 
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Table 6.3.5: Authentication Data content - Response for IMS-AKA 



Information 
element name 


Mapping to 
Diameter AVP 


Cat. 


Description 


Item Number 
(See 7.9.1) 


SlP-ltem- 
Number 


C 


This information element shall be present in a SIP-Auth-Data-ltem grouped 
AVP in circumstances where there are multiple occurrences of SIP-Auth- 
Data-ltem AVPs, and the order in which they should be processed is 
significant. In this scenario, SIP-Auth-Data-ltem AVPs with a low SlP-ltem- 
Number value should be processed before SIP-Auth-Data-ltems AVPs with 
a high SIP-ltem-Number value. 


Authentication 
Scheme 
(See 7.9.2) 


SIP- 

Authentication- 

Scheme 


M 


Authentication scheme. It shall contain "Digest-AKAv1-MD5". 


Authentication 
Information 
(See 7.9.3) 


SIP- 
Authenticate 


M 


It shall contain, binary encoded, the concatenation of the authentication 
challenge RAND and the token AUTN. See 3GPP TS 33.203 [3] for further 
details about RAND and AUTN. The Authentication Information has a fixed 
length of 32 octets; the 16 most significant octets shall contain the RAND, 
the 16 least significant octets shall contain the AUTN. 


Authorization 
Information 
(See 7.9.4) 


SIP- 
Authorization 


M 


It shall contain, binary encoded, the expected response XRES. See 3GPP 
TS 33.203 [3] for further details about XRES. 


Confidentiality 

Key 

(See 7.9.5) 


Confidentiality- 
Key 





This information element, if present, shall contain the confidentiality key. It 
shall be binary encoded. 


Integrity Key 
(See 7.9.6) 


Integrity-Key 


M 


This information element shall contain the integrity key. It shall be binary 
encoded. 



Table 6.3.6: Authentication Data content - Response for SIP Digest 



Information 
element name 


Mapping to 
Diameter AVP 


Cat. 


Description 


Authentication 
Scheme 
(See 7.9.2) 


SIP- 

Authentication- 

Scheme 


M 


This information element indicates the authentication scheme. It shall 
contain "SIP Digest". 


Digest 
Authenticate 
(See 7.9.8) 


SIP-Digest- 
Authenticate 


M 


See Table 6.3.7 for contents of this information element. 
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Table 6.3.7: Digest Authenticate content - Response for SIP Digest 



Information 
element name 


Mapping to 
Diameter AVP 


Cat. 


Description 


Digest Realm 
(See 7.9.8.1) 


Digest-Realm 


M 


This information element corresponds to the realm parameter as defined in 
IETF RFC 2617 [16]. 


Digest 
Algorithm 
(See 7.9.8.3) 


Digest- 
Algorithm 





This information element contains the algorithm as defined in IETF RFC 
2617 [16]. 

If this information element is not present, then "MD5" is assumed. 
If this information element is present it shall contain "MD5". 


Digest QoP 
(See 7.9.8.4) 


Digest-QoP 


M 


This information element contains the qop as defined in IETF RFC 2617 
[16]. This information element shall be set to a value of "auth" by the HSS. 


Digest HA1 
(See 7.9.8.5) 


Digest-HA1 


M 


This information element contains the H(A1) as defined in IETF RFC 2617 
[16]. 



Table 6.3.8: Authentication Data content - Response for NASS-Bundled Authentication 



Information 
element name 


Mapping to 
Diameter AVP 


Cat. 


Description 


Authentication 
Scheme 
(See 7.9.2) 


SIP- 

Authentication- 

Scheme 


M 


Authentication scheme. It shall contain "NASS-Bundled". 


Line Identifier 
(See 7.9.9) 


Line-Identifier 


M 


This information element contains fixed broadband access line identifier 
associated to the user. This information element can be repeated. 



Table 6.3.9: Authentication Data content - Response for GPRS-IMS-Bundled Authentication 



Information 
element name 


Mapping to 
Diameter AVP 


Cat. 


Description 


Authentication 
Scheme 
(See 7.9.2) 


SIP- 

Authentication- 

Scheme 


M 


Authentication scheme. For GPRS-IMS-Bundled Authentication it shall 
contain "Early-IMS-Security" 


User IPv4 
Address 


Framed-IP- 
Address 


C 


If the IP Address of the User is an IPv4 address, this AVP shall be 

included. 

For a description of the AVP see IETF RFC 4005 [21]. 


User IPv6 
Prefix 


Framed-IPv6- 
Prefix 


C 


If the IP Address of the User is an IPv6 address, this AVP shall be 

included. 

For a description of the AVP see IETF RFC 4005 [21]. 


Framed 
Interface Id 


Framed- 
Interface-ld 


c 


If and only if the IP Address of the User is an IPv6 address and the 

Framed-IPv6-Prefix AVP alone is not unique for the user this AVP shall be 

included. 

For a description of the AVP see IETF RFC 4005 [21]. 



6.3.1 Detailed behaviour 

The HSS shall, in the following order (in case of an error in any of the steps the HSS shall stop processing and return 
the corresponding error code, see 3GPP TS 29.229 [5]): 

1. Check that the Private User Identity and the Public User Identity exist in the HSS. If not Experimental-Result- 
Code shall be set to DIAMETER_ERROR_USER_UNKNOWN. 

2. Check that the Public User Identity matches a distinct Public User Identity in the HSS. If it doesn't, the 
Experimental-Result-Code shall be set to DIAMETER_ERROR_USER_UNKNOWN. 

3. Check whether the Private and Public User Identities in the request are associated in the HSS. If not 
Experimental-Result-Code shall be set to DIAMETER_ERROR_IDENTITIES_DONT_MATCH. 

4. Check the authentication scheme indicated in the request, and 

if it is "Unknown", check the authentication scheme stored in HSS. If it is neither NASS-Bundled 
authentication nor SIP Digest authentication, Experimental-Result-Code shall be set to 
DIAMETER_ERROR_AUTH_SCHEME_UNSUPPORTED. 

if not, check that the authentication scheme indicated in the request is supported. If not Experimental-Result- 
Code shall be set to DIAMETER_ERROR_AUTH_SCHEME_UNSUPPORTED. 
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This step is only applicable for IMS-AKA authentication. If the request indicates there is a synchronization 
failure, the HSS shall compare the S-CSCF name received in the request to the S-CSCF name stored in the HSS: 

If they are identical the HSS shall process AUTS as described in 3GPP TS 33.203 [3] and return the 
requested authentication information. The Result-Code shall be set to DIAMETER_SUCCESS. 

5. Check the registration status of the Public User Identity received in the request: 

If it is registered, the HSS shall compare the S-CSCF name received in the request to the S-CSCF name 
stored in the HSS: 

If they are different, the HSS shall overwrite the S-CSCF name. If IMS restoration procedures are 
supported and the S-CSCF reassignment pending flag is set, the HSS shall reset the flag and keep the S- 
CSCF restoration information associated with the Public User Identity. The HSS shall download SIP- 
Auth-Data-Item stored up to a maximum specified in SIP -Number- Auth-Items received in the command 
Multimedia-Auth-Request. If authentication scheme is neither NASS-Bundled nor GIBA, the HSS shall 
set the Public User Identity's authentication pending flag which is specific to the Private User Identity 
received in the request. The Result-Code shall be set to DIAMETER_SUCCESS. 

If they are identical, the HSS shall download SIP-Auth-Data-Item stored up to a maximum specified in 
SIP-Number- Auth-Items received in the command Multimedia-Auth-Request. The Result-Code shall be 
set to DIAMETER_SUCCESS. 

If it is unregistered (i.e. registered as a consequence of an originating or terminating request or there is an S- 
CSCF keeping the user profile stored) or not registered, the HSS shall compare the S-CSCF name received in 
the request to the S-CSCF name stored in the HSS: 

If they are different or if there is no S-CSCF name stored in the HSS for any Public User Identity of the 
IMS subscription, the HSS shall store the S-CSCF name. The HSS shall download SIP-Auth-Data-Item 
stored up to a maximum specified in SIP -Number- Auth-Items received in the command Multimedia- 
Auth-Request. If authentication scheme is neither NASS-Bundled nor GIBA, the HSS shall set the Public 
User Identity's authentication pending flag which is specific to the Private User Identity which was 
received in the request. The Result-Code shall be set to DIAMETER_SUCCESS. 

- If they are identical, the HSS shall download SIP-Auth-Data-Item stored up to a maximum specified in 
SIP -Number- Auth-Items received in the command Multimedia-Auth-Request. If authentication scheme is 
neither NASS-Bundled nor GIBA, the HSS shall set the Public User Identity's authentication pending 
flag which is specific to the Private User Identity that was received in the request. The Result-Code shall 
be set to DIAMETER_SUCCESS. 

Exceptions to the cases specified here shall be treated by HSS as error situations, the Result-Code shall be set to 
DIAMETER UNABLE TO COMPLY. No authentication information shall be returned. 



6.4 User identity to HSS resolution 



The User identity to HSS resolution mechanism enables the I-CSCF and the S-CSCF to find the identity of the HSS, 
that holds the subscriber data for a given Public Identity when multiple and separately addressable HSSs have been 
deployed by the network operator. The resolution mechanism is not required in networks that utilise a single HSS. An 
example for a single HSS solution is server farm architecture. 

The resolution mechanism described in 3GPP TS 23.228 [1] shall use a Subscription Locator Function (SLF) or a 
Diameter Proxy Agent. 

The I-CSCF and the S-CSCF accesses the SLF via the Dx interface. The Dx interface shall always be used in 
conjunction with the Cx interface. The Dx interface shall be based on Diameter. The SLF functionality shall use the 
routing mechanism provided by an enhanced Diameter redirect agent. 

The SLF or the Diameter Proxy Agent shall be able to determine the HSS identity. 

To get the HSS identity the I-CSCF and the S-CSCF shall send the Cx request normally destined to the HSS to a pre- 
configured Diameter address/name. 

If this Cx Request is received by an SLF (acting as a Diameter redirect agent), the SLF shall determine the HSS 
identity and sends to the I-CSCF or S-CSCF a notification of redirection towards the HSS identity, in response to 
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the Cx request. Multiple HSS identities may be included in the response, as specified in IETF RFC 3588 [9]. In 
such a case, the I-CSCF or the S-CSCF shall send the Cx Request to the first HSS identity in the ordered list 
received in the Cx Response from the SLF. If the I-CSCF or S-CSCF does not receive a successful response to 
the Cx Request, the I-CSCF or S-CSCF shall send a Cx Request to the next HSS identity in the ordered list. This 
procedure shall be repeated until a successful response from an HSS is received. 

If this Cx Request is received by the Diameter Proxy Agent, the Diameter Proxy Agent shall determine the HSS 
identity and shall forward the Cx request directly to the HSS. The I-CSCF and S-CSCF shall determine the HSS 
identity from the response to the Cx request received from the HSS. 

While the I-CSCF is stateless, the S-CSCF shall store the HSS identity/name/Realm, as specified in 3GPP TS 23.228 
[1] and shall use it in further Cx requests associated to the same IMS Public Identity. 

In networks where the use of the user identity to HSS resolution mechanism is required, each I-CSCF and S-CSCF shall 
be configured with the address/name of the SLF or the Diameter Proxy Agent to enable use of these resolution 
mechanisms. 



6.5 Implicit registration 



Implicit registration is the mechanism by which a user is allowed to register simultaneously more than one of his/her 
Public User Identities. The HSS knows the identities that are to be implicitly registered when it receives the indication 
of the registration of an individual identity. 

What follows is an extension of the affected basic procedures. 

6.5.1 S-CSCF initiated procedures 

The result of the S-CSCF initiated procedures affects all the Public User Identities that are configured in the HSS to be 
in the same implicitly registered Public User Identity set with the targeted individual Public User Identity. Where the S- 
CSCF initiated procedure affects the Registration state of the targeted Public User Identity, the Registration states of the 
Public User Identities in the associated implicitly registered Public User Identity set are affected in the same way. 

6.5.1.1 Registration 

The notification of a registration of a Public User Identity implies the registration of the corresponding implicitly 
registered Public User Identity set. The user information downloaded in the response contains the Public User Identities 
of the implicitly registered Public User Identity set with the associated service profiles. This allows the S-CSCF to 
know which Public User Identities belong to the implicitly registered Public User Identity set. The S-CSCF shall take 
from the set of implicitly registered Public User Identities the first identity which is not barred, and use this as the 
default Public User Identity. The default Public User Identity shall be a distinct Public User Identity. 

6.5.1.2 De-registration 

The de-registration of a Public User Identity implies the de-registration of the corresponding implicitly registered Public 
User Identity set, both in the HSS and in the S-CSCF. The S-CSCF shall include in the request a single Public User 
Identity to deregister all the Public User Identities that belong to the corresponding implicitly registered Public User 
Identity set. 

The de-registration of a Private User Identity implies the de-registration of all the corresponding Public User Identities, 
both in the HSS and in the S-CSCF. 

6.5.1.3 Authentication 

Setting the authentication pending flag for a Public User Identity implies setting the authentication pending flag for each 
corresponding implicitly registered Public User Identity in the HSS. 

6.5.1 .4 Downloading the user profile 

If the S-CSCF requests to download a user profile from HSS, the user profile in the response shall contain the Public 
User Identities of the corresponding implicitly registered Public User Identity set with the associated service profiles. 
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6.5.1 .5 Initiation of a session to a non-registered user 

The change of a PubUc User Identity to the Unregistered state due to the initiation of a session from/to a Public Identity 
that was in Not Registered state and the opposite change from Unregistered state to Not Registered state implies the 
same change for all the Public User Identities in the same Implicit Registration Set. 

6.5.2 HSS initiated procedures 

6.5.2.1 Update of User Profile 

A request sent by the HSS to update the user profile shall include only the Public User Identities of the implicitly 
registered Public User Identity set, with the associated service profiles (even if not updated). If other Public User 
Identities not associated with the implicitly registered Public User Identity set are affected, they shall be downloaded in 
separate commands. 

This procedure shall be used by the HSS to add a newly provisioned or Not Registered Public User Identity or Identities 
to an existing implicitly registered Public User Identity set that is in the state Registered or Unregistered. The added 
Public User Identity gets the registration state of the set it is added to. 

The HSS shall use this procedure if a Public User Identity or Identities are removed from the implicitly registered 
Public User Identity set that is in a state Registered or Unregistered. In practise, this is done by sending a PPR for the 
set without the removed identities. The S-CSCF shall remove all information stored in the S-CSCF for the removed 
identities. 

The HSS shall not use this procedure if there is no Public User Identities left in the implicitly registered Public User 
Identity set after the removal. In that case HSS shall use the RTR command instead. 

The HSS shall not use this procedure to change the default Public User Identity of the implicitly registered Public User 
Identity set that is in a state Registered. In that case the HSS shall use the RTR command to de-register the Public User 
Identity set. 

Moving of a Public User Identity or Identities from one implicitly registered Public User Identity set to another set shall 
be done in two steps: First the identity or identities are removed from the "old" set as described above, then the identity 
or identities are added to the "new" set as described above. 

6.5.2.2 De-registration 

A request sent by the HSS to de-register any of the identities included in an implicitly registered Public User Identity set 
shall affect all the Public User Identities of the deregistered set. 

The de-registration of a Private User Identity implies the de-registration of all the corresponding Public User Identities, 
both in the HSS and in the S-CSCF. 

6.5.2.3 Update of the Charging information 

A request sent by the HSS to update the charging information shall include the Private User Identity for whom the 
charging information changed. 

6.6 Download of the Relevant User Profile 

The download of the relevant user profile from the HSS to the S-CSCF depends on whether the user profile is already 
stored in the S-CSCF. If the SiFC feature is supported by the HSS and S-CSCF, the HSS shall download the identifiers 
of the shared iFC sets. If either the HSS or the S-CSCF does not support the SiFC feature, the HSS shall download the 
complete iFCs, and SiFC identifiers shall not be downloaded by the HSS. The SiFC feature is defined in 3GPP TS 

29.229 [5]. 

If User-Data- Already- Available is set to USER_DATA_NOT_AVAILABLE the HSS shall download the requested 
user profile. If the Public User Identity in the request is included in an implicitly registered Public User Identity set, the 
HSS shall include in the response the service profiles associated with all Public User Identities within the implicitly 
registered Public User Identity set to which the received Public User Identity belongs. 
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If User-Data- Already- Available is set to USER_DATA_ALREADY_AVAILABLE, the HSS should not return any user 
profile data. The HSS may override User-Data-Already- Available set to USER_DATA_ALREADY_AVAILABLE and 
download the user profile. 

6.6.1 HSS initiated update of User Profile 

The request to update the user profile in the S-CSCF includes only the Public User Identities of the implicitly registered 
Public User Identity set with the associated service profiles. See 6.5.2.1. 

If the Public Identity is registered or unregistered (i.e. registered as a consequence of an originating or terminating 
request or there is a S-CSCF keeping the user profile stored) and there are changes in the user profile, the HSS should 
immediately push the complete user profile to the S-CSCF. 

6.6.2 S-CSCF operation 

At deregistration of a Public User Identity, the S-CSCF shall store the user information if it sends Server- Assignment- 
Request command including Server-Assignment-Type AVP set to value 
USER_DEREGISTRATION_STORE_SERVER_NAMEor 

TIMEOUT_DEREGISTRATION_STORE_SERVER_NAME and the HSS responds with DIAMETER_SUCCESS. 
Otherwise the S-CSCF shall not keep user information. 



6.7 S-CSCF Assignment 



The list of mandatory and optional capabilities received by an I-CSCF from the HSS allows operators to distribute users 
between S-CSCFs, depending on the different capabilities (e.g. features, role, geographical location) that each S-CSCF 
may have. Alternatively, an operator has the possibility to steer users to certain S-CSCFs. 

The operator shall define (possibly based on the functionality offered by each S-CSCF installed in the network) the 
exact meaning of the S-CSCF mandatory and optional capabilities available in his network. It is an operator task to 
allocate a unique value to represent a single capability (e.g. support of "wildcarded PSI") or a set of capabilities (e.g. 
support of "alias" and "Shared IFC sets" and "wildcarded PSI") and to use these values to identify capabilities that are 
mandatory and/or optional to support for a given subscription. It is a configuration task for the operator to ensure that 
the I-CSCF has a correct record of the capabily values received from the HSS for each S-CSCF available in his 
network. The I-CSCF and the HSS do not need to know the semantic of these values. This semantic is exclusively an 
operator issue. 

As a first choice, the I-CSCF shall select an S-CSCF that has all the mandatory and optional capabilities for the user. 
Only if that is not possible shall the I-CSCF apply a 'best-fit' algorithm. If more than one S-CSCF is identified that 
supports all mandatory capabilities the I-CSCF may then consider optional capabilities in selecting a specific S-CSCF. 
The 'best-fit' algorithm is implementation dependent and out of the scope of this specification. 

It is the responsibility of the operator to ensure that there are S-CSCFs which have mandatory capabilities indicated by 
the HSS for any given user. However, configuration errors may occur. If such errors occur and they prevent the I-CSCF 
from selecting an S-CSCF which meets the mandatory capabilities indicated by the HSS, the I-CSCF shall inform the 
operator via the O&M subsystem. 

As an alternative to selecting an S-CSCF based on the list of capabilities received from the HSS, it is possible to steer 
users to certain S-CSCFs. To do this, the operator may include one or more S-CSCF names as part of the capabilities of 
the user profile. The reason for the selection (e.g. all the users belonging to the same company/group could be in the 
same S-CSCF to implement a VPN service) and the method of selection are operator issues and out of the scope of this 
specification. If this alternative is chosen, the HSS shall include Server-Name AVPs in the Server-Capabilities AVP and 
should not include Mandatory-Capability AVPs or Optional-Capability AVPs in the Server-Capabilities AVP, and the I- 
CSCF when receiving Server-Name AVPs within the Server-Capabilities AVP shall discard any Mandatory-Capability 
AVP and any Optional-Capability AVP received within the Server-Capabilities AVP. 

The following table is a guideline for operators that records S-CSCF capabilities that need to be supported by an S- 
CSCF in order to serve a user or a service (identified by a Public User Identity or Public Service Identity), that cannot 
be served by an S-CSCF which is only compliant to a previous 3GPP release. 
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Table 6.7: Guidelines for S-CSCF Capabilities 



Capability 


Mandatory or 
Optional 
(N0TE1) 


Description 


Support of "Wildcarded PSI" 


M 


This capability indicates that the assigned S-CSCF shall 
support the handling of Wildcarded PSIs. 


Support of "OrigUnreg SPT" 


M 


This capability indicates that the assigned S-CSCF shall 
be able to process iFCs with a Session Case 
"Originating_Unregistered" received from the HSS in the 
user profile. 


Support of "OrigCDIV SPT" 


M 


This capability indicates that the assigned S-CSCF shall 
be able to process IPCs with a Session Case 
"Originating_CDIV" received from the HSS in the user 
profile. 


Support of "Shared iFC sets" 





This capability indicates that the assigned S-CSCF may 
support the "SiFC" feature defined in the 3GPP TS 29.229 
[51. 


Support of "Display Name" 





This capability indicates that the assigned S-CSCF may 
support the handling of "Display Name". The behaviour of 
the S-CSCF related to this missing data is the same as if 
the HSS did not send the Display Name. 


Support of "Alias" 





This capability indicates that the assigned S-CSCF may 
support the "Aliaslnd" feature defined in 3GPP TS 29.229 
[51. 


Support of "SIP Digest Authentication" 


M 


This capability indicates that the assigned S-CSCF shall 
support the handling of SIP Digest Authentication. 


Support of "NASS Bundled 
Authentication" 


M 


This capability indicates that the assigned S-CSCF shall 
support the handling of NASS Bundled Authentication. 


Support of "Wildcarded IIVIPUs" 


M 


This capability indicates that the assigned S-CSCF shall 
support the handling of Wildcarded Public User Identities. 


Support of "Loose-Route " 


M 


This capability indicates that the assigned S-CSCF shall 
support the loose-route mechanism. 


Support of "Service Level Trace" 


M 


This capability indicates that the assigned S-CSCF shall 
support the Service Level Trace mechanism. 


Support of "Priority Service" 


M 


This capability indicates that the S-CSCF shall support a 
network default pre-configured namespace (e.g. "wps") 
and the associated Service Priority Level. See IETF RFC 
4412 [22] and 3GPP TS 24.229 [8]. 


Support of "Extended Priority " 
(NOTE 2) 


M 


This capability indicates that the S-CSCF shall support the 
Priority Namespaces and their associated Priority Levels. 
See IETF RFC 4412 [22] and 3GPP TS 24.229 [8]. 


Support of "Early IMS Security" 


M 


This capability indicates that the assigned S-CSCF shall 
support GIBA. 


NOTE 1 : IVIandatory (M) corresponds to a Mandatory Capability that shall be supported by the assigned S-CSCF for a 
given user. The l-CSCF shall not select an S-CSCF that does not meet a mandatory capability. The selection 
of a S-CSCF not supporting this capability would lead to an unspecified network behaviour. 

Optional (0) corresponds to an Optional Capability that may be supported by the assigned S-CSCF for a 
given user. The selection of a S-CSCF that would not support this capability will not significantly affect the 
network behaviour. 
NOTE 2: Support of "Extended Priority " is backward compatible with continued support of the "Priority Service". 
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7 Information element contents 

7.1 Visited Network Identifier 

This information element contains the domain name of the visited network. 

7.2 Public User Identity 

This information element contains the Public User Identity. For definition of a Public User Identity, see 3GPP TS 
23.003 [17]. 

When GPRS-IMS-Bundled Authentication (GIBA) is used, a Temporary Public User Identity is derived from the IMSI 
used for bearer network access according to the rules in 3GPP TS 23.003 [17]. 

7.2a Public Service Identity 

This information element contains a Public Service Identity (PSI) that is hosted by an application server. For definition 
of a PSI, see 3GPP TS 23.003 [17]. 



7.2b Wildcarded Public Identity 



This information element contains a Wildcarded PSI that is hosted by an application server or a Wildcarded Public User 
Identity. For definition of a Wildcarded PSI and a Wildcarded Public User Identity, see 3GPP TS 23.003 [17]. 

7.2c Void 



7.3 Private User Identity 



This information element contains the Private User Identity. For definition of a Private User Identity, see 3GPP TS 
23.003 [17]. 

When GPRS-IMS-Bundled Authentication (GIBA) is used, the Private User Identity is derived from the IMSI as 
specified in 3GPP TS 33.203 [3]. 

7.3a Private Service Identity 

This information element contains the Private Service Identity. For definition of a Private Service Identity, see 3GPP TS 
23.003 [17]. 

7.4 S-CSCF Name 

This information element contains the S-CSCF Name of the S-CSCF assigned to an IMS Subscription. For definition of 
a S-CSCF Name, see 3GPP TS 23.008 [18]. 

7.4a AS Name 

This information element contains the AS Name of the AS hosting a Public Service Identity. For definition of AS 
Name, see 3GPP TS 23.008 [18]. 
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7.5 S-CSCF Capabilities 



This information element carries information to assist the I-CSCF during the process of selecting an S-CSCF for a 
certain IMS Subscription. 

7.6 Result 

This information element contains result of an operation. See 3GPP TS 29.229 [5] for the possible values. 

11 User Profile 

This information element contains the user profile in XML format. The user profile XML shall be valid against the user 
profile XML schema defined in Annex E. 

Annex B specifies the UML logical model of the user profile downloaded via the Cx interface. 

Annex D contains and informative, high level representation, of the wire representation of user profile data. 

7.8 Server Assignment Type 

Indicates the type of server assignment. See 3GPP TS 29.229 [5] for the list of existing values. 

7.9 Authentication Data 

This information element is composed of the following sub-elements. 

7.9.1 Item Number 

This information element indicates the order in which the authentication vectors are to be consumed. 

7.9.2 Authentication Scheme 

This information element contains the authentication scheme, which is used to encode the authentication parameters. 

7.9.3 Authentication Information 

This information element is used to convey the challenge and authentication token user during the authentication 
procedure. See 3GPP TS 33.203 [3] for details. 

7.9.4 Authorization Information 

This information element is used, in an authentication request, to indicate a failure of synchronization. In a response, it 
is used to convey the expected response to the challenge used to authenticate the user. See 3GPP TS 33.203 [3]. 

7.9.5 Confidentiality Key 

This information element contains the confidentiality key. See 3GPP TS 33.203 [3]. 

7.9.6 Integrity Key 

This information element contains the integrity key. See 3GPP TS 33.203 [3]. 
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7.9.7 Authentication Context 

This information element contains authentication-related information relevant for performing the authentication but that 
is not part of the SIP authentication headers. Some mechanisms (e.g. PGP, digest with quality of protection set to 
authint defined in IETF RFC 2617 [16], digest with predictive nonces or sip access digest) request that part or the whole 
SIP request (e.g. the SIP method) is passed to the entity performing the authentication. In such cases the 
SIP Authentication-Context AVP shall be carrying such information. 

7.9.8 Digest Autinenticate 

This information element is composed of the following sub-elements. 

7.9.8.1 Digest Realm 

This information element is part of the Digest authentication challenge, and corresponds to the realm parameter as 
defined in IETF RFC 3261 [11]. This information element is used to convey the realm to the S-CSCF during the SIP 
Digest authentication procedure. 

7.9.8.2 Void 

7.9.8.3 Digest Algorithm 

This information element is part of the Digest authentication challenge, defined in IETF RFC 2617 [16]. 

7.9.8.4 Digest QoP 

This information element is part of the Digest authentication challenge, defined in IETF RFC 2617 [16]. It provides the 
Quality of Protection indication and has an effect on the digest computation. 

7.9.8.5 Digest HA1 

This information element is part of the Digest authentication challenge, defined in IETF RFC 2617 [16]. 

7.9.9 Line Identifier 

This information element contains the line identifier of the user's network termination. 

7.10 Number AutiienticatJon Items 

This information element contains the number of authentication vectors requested or delivered. 

7.1 1 Reason for de-registration 

This information element contains the reason for a de-registration procedure. 

7.12 Ciiarging information 

Addresses of the charging functions. See 3GPP TS 29.229 [5]. 

7.13 Routing information 

Information to route requests. 
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7. 1 4 Type of authorization 

Type of authorization requested by the I-CSCF. See 3GPP TS 29.229 [5] for a hst of values. 

7.15 Void 

Void 

7.1 6 User Data Already Available 

This information element indicates to the HSS if the user profile is already available in the S-CSCF. See 3GPP TS 
29.229 [5] for a hst of values. 

7.17 Associated Private Identities 

This information element indicates to the S-CSCF the Private Identities, which belong to the same IMS Subscription as 
the Private Identity received in the request command. See 3GPP TS 29.229 [5]. 

7.18 Originating-Request 

This information element indicates to the HSS that the request is related to an originating SIP message. See 3GPP 
29.229 [5]. 

7.19 User Authorization Request Flags 

This information element carries the following indication (see 3GPP 29.229 [5] for coding details): 
- IMS Emergency Registration. 

7.20 Loose-Route Indication 

This information element indicates to the S-CSCF that the loose-route mechanism shall be applied to the public 
identities contained in the user profile received from the HSS. See 3GPP TS 29.229 [5]. This information is static data 
for the duration of the subscription or the validity of the IMS identity. Modification of this data result in Network 
Initiated Deregistration (SERVER_CHANGE); see section 6.1.3.1. 



7.21 S-CSCF Restoration Information 

This information element contains information for the S-CSCF to handle traffic for a registered user. It is^associated 
with the Private User Identity and the Implicit Registration Set that is affected by the SAR request. See 3GPP TS 
29.229 [5] for the contents of this information element. 

7.22 Associated Registered Private Identities 

This information element indicates to the S-CSCF the Registered Private Identities, which were registered with the 
Public Identity received in the request command. See 3GPP TS 29.229 [5]. 

7.23 Multiple Registration Indication 

This information element indicates to the HSS that this is related to a multiple registration. See 3GPP TS 29.229 [5]. 
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7.24 Session-Priority 

This information element indicates the session's priority level to the HSS. See 3GPP TS 29.229 [5]. 



8 Error liandling procedures 

8.1 Registration error cases 

This section describes the handling of error cases, which can occur during the registration process. If the new and 
previously assigned S-CSCF names sent in the Multimedia-Auth-Request command are different and the Multimedia- 
Auth-Request is not indicating synchronisation failure (i.e. the request does not contain auts parameter), then the HSS 
shall overwrite the S-CSCF name. 

If the new and previously assigned S-CSCF names sent in a command other than the Multimedia-Auth-Request 
command are different and the S-CSCF reassignment pending flag is not set, then the HSS shall not overwrite the S- 
CSCF name; instead it shall send a response to the S-CSCF indicating an error. 

8.1.1 Cancellation of the old S-CSCF 

It is possible that in certain situations the HSS receives a Multimedia-Auth-Request (MAR) command including a S- 
CSCF name, which is not the same as the previously assigned S-CSCF for the user. This can happen e.g. in case the 
new S-CSCF is selected due to a failure in the re-registration if the previously assigned S-CSCF does not respond to 
REGISTER message sent from the I-CSCF after a timeout. 

In this case, the new S-CSCF is assigned for the user and if registrations in the previously assigned S-CSCF exist for the 
user, these registrations in the old S-CSCF are handled locally in the old S-CSCF, e.g. re-registration timers in the old 
S-CSCF shall cancel the registrations. Additionally, the HSS should de-register the registrations in the old S-CSCF by 
using the Registration-Termination-Request command. In this case, the HSS shall first check whether the deregistration 
is really required by comparing the Diameter client address of the newly assigned S-CSCF received in the MAR 
command to the Diameter client address stored in the HSS. If the Diameter client addresses match, the deregistration 
shall not be initiated. Otherwise the deregistration should be initiated for all the Public User Identities associated to the 
same Private User Identity, and if there is a Public User Identity shared by multiple Private User Identities, then the 
Registration-Termination-Request shall also be sent for all those Private User Identities. It shall be done in the 
following order: 

1. Deregistration-Reason AVP value set to NEW_SERVER_ASSIGNED, for the Pubhc User Identity, which is 
registered in the new S-CSCF. 

2. Deregistration-Reason AVP value set to SERVER_CHANGE, for the user Public User Identities, which are not 
registered in the new S-CSCF. 

8.1.2 Error in S-CSCF name 

If the S-CSCF name sent in the Server- Assignment-Request command and the previously assigned S-CSCF name 
stored in the HSS are different and the S-CSCF reassignment pending flag is not set, then the HSS shall not overwrite 
the S-CSCF name. If the Server Assignment Type indicates NO_ASSIGNMENT, the HSS shall send a response to the 
S-CSCF with Result-Code value set to DIAMETER_UNABLE_TO_COMPLY. For all other Server Assignment Types, 
the HSS shall send a response to the S-CSCF with Experimental-Result-Code value set to 
DIAMETER_ERROR_IDENTITY_ALREADY_REGISTERED. 

If the S-CSCF name sent in the Server- Assignment-Request command and the previously assigned S-CSCF name 
stored in the HSS are different and IMS Restoration Procedures are supported and the S-CSCF reassignment pending 
flag is set, then the HSS shall allow overwriting of the S-CSCF name and proceed with the processing of the SAR 
command as defined in section 6.1.2. 
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8.1 .3 Error in S-CSCF assignment type 



If the Server- Assignment-Type in the Server- Assignment-Request command sent by the S-CSCF to the HSS is not 
allowed (i.e if the Server- Assignment-Type is not applicable based on the user state or it is not applicable based on the 
user identity type), the HSS shall send a response to the S-CSCF with the Experimental-Result-Code value set to 
DIAMETER ERROR IN ASSIGNMENT TYPE. 



9 Protocol version identification 

See 3GPPTS 29.229 [5]. 



1 Operational Aspects 

See 3GPPTS 29.229 [5]. 
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Annex A (normative): 

Mapping of Cx operations and terminology to Diameter 



A.1 Introduction 



This appendix gives mappings from Cx to Diameter protocol elements. Diameter protocol elements are defined in 3GPP 
TS 29.229 [5]. 



A.2 Cx message to Diameter command mapping 

The following table defines the mapping between stage 2 operations and Diameter commands: 
Table A.2.1 : Cx message to Diameter command mapping 



Cx message 


Source 


Destination 


Command-Name 


Abbreviation 


Cx-Query + Cx-Select-Pull 


l-CSCF 


HSS 


User-Authorization-Request 


UAR 


Cx-Query Resp + Cx-Select-Pull 
Resp 


HSS 


l-CSCF 


User-Authorization-Answer 


UAA 


Cx-Put + Cx-Pull 


S-CSCF 


HSS 


Server-Assignment-Request 


SAR 


Cx-Put Resp + Cx-Pull Resp 


HSS 


S-CSCF 


Server-Assignment-Answer 


SAA 


Cx-Location-Query 


l-CSCF 


HSS 


Location-Info-Request 


LIR 


Cx-Location-Query Resp 


HSS 


l-CSCF 


Location-Info-Answer 


LIA 


Cx-AuthDataReq 


S-CSCF 


HSS 


Multimedia-Authentication- 
Request 


MAR 


Cx-AuthDataResp 


HSS 


S-CSCF 


Multimedia-Authentication-Answer 


MAA 


Cx-Deregister 


HSS 


S-CSCF 


Registration-Termination-Request 


RTR 


Cx-Deregister Resp 


S-CSCF 


HSS 


Registration-Termination-Answer 


RTA 


Cx-Update Subscr Data 


HSS 


S-CSCF 


Push-Profile-Request 


PPR 


Cx-Update Subscr Data Resp 


S-CSCF 


HSS 


Push-Profile-Answer 


PPA 



A.3 Cx message parameters to Diameter AVP mapping 

The following table gives an overview about the mapping: 
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Table A.3.1 : Cx message parameters to Diameter AVP mapping 



Cx parameter 


AVP Name 


Visited Networl< Identifier 


Visited-Network-ldentifier 


Public Identity 


Public-Identity 


Private Identity 


User-Name 


S-CSCF Name 


Server-Name 


AS Name 


S-CSCF capabilities 


Server-Capabilities 


Result 


Result-Code 


Experimental-Result-Code 


User profile 


User-Data 


Server Assignment Type 


Server-Assignment-Type 


Authentication data 


SIP-Auth-Data-ltem 


Item Number 


SIP-ltem-Number 


Authentication Scheme 


SIP-Authentication- 
Scheme 


Authentication Information 


SIP-Authenticate 


Authorization Information 


SIP-Authorization 


Confidentiality Key 


Confidentiality-Key 


Integrity Key 


Integrity-Key 


Number Authentication 
Items 


SIP-Number-Auth-ltems 


Reason for de-registration 


Deregistration-Reason 


Charging Information 


Charging-lnformation 


Routing Information 


Destination-Host 


Type of Authorization 


Authorization-Type 


Associated Private 
Identities 


Associated- Identities 


Digest Authenticate 


SIP-Digest-Authenticate 


Digest Realm 


Digest-Realm 


Digest Algorithm 


Digest-Algorithm 


Digest QoP 


Digest-QoP 


Digest HA1 


Digest-HAI 


Line Identifier 


Line- Identifier 


Wildcarded Public Identity 


Wildcarded-Public Identity 


Loose-Route Indication 


Loose-Route-Indication 


S-CSCF Restoration 
Information 


SCSCF-Restoration-lnfo 


IVIultiple Registration 
Indication 


Multiple-Registration- 
Indication 



A.4 Message flows 



The following message flows give examples regarding which Diameter messages shall be sent in scenarios described in 

3GPPTS 23.228 [1]. 
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A.4.1 Registration- user not registered 
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Home Network 
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Authentication 
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Figure A.4.1. 1 : Registration - user not registered 
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A.4.2 Registration - user currently registered 



Visited Network 



Home Network 



UE 



P-CSCF 



I-CSCF 



1. Register 



►■ 2. Register 



10. 200 OK 



9. 200 OK -4 



HSS 



S-CSCF 
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4. UAA 
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Figure A.4.2. 1 : Re-registration 



A.4.3 UE initiated de-registration 



Visited Network 



Home Network 



UE P-CSCF 

1. REGISTER 



I-CSCF 



HSS 



S-CSCF 



10. 200 OK 



2. REGISTER 



9. 200 OK 



3. UAR 



4. UAA 



5. REGISTER 



6. SAR 



7. SAA 



8. 200 OK 



Figure A.4.3. 1 : UE initiated de-registration 
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A.4.4 Network initiated de-registration 
A.4.4.1 Registration timeout 



UE 



P-CSCF S-CSCF 



HSS 



1 . Timer 
Expires 



1. Timer 
Expires 



2. SAR 



3. SAA 



Figure A.4.4.1. 1: Network initiated de-registration - registration timeout 



A.4.4. 2 Administrative de-registration 
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HSS 



1. RTR 
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Figure A.4.4.2.1 : Networl< initiated de-registration - administrative de-registration 
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A.4.4.3 De-registration initiated by service platform 



UE 



P-CSCF 



3. UE Inform 



5. OK 200 
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Figure A.4.4.3. 1 : Network initiated de-registration - initiated by service platform 



A.4.5 UE Terminating SIP session set-up 
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Figure A.4.5. 1 : UE Terminating SIP session set-up 
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A.4.6 Initiation of a session to a non-registered user 



T-CSCF 



HSS 
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4. S-CSCF Selection 



5. INVITE 
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9. S-CSCF performs further actions 



Figure A.4.6.1 : Initiation of a session to a non-registered user 



A.4.6a AS originating session on behalf of a non-registered user 
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Figure A.4.6a.1 : AS originating session on behalf of a non-registered user 
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A.4.7 User Profile update 




Figure A.4.7.1 : User profile update 
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Annex B (informative): 
User profile UIVIL model 



The purpose of this UML model is to define in an abstract level the structure of the user profile downloaded over the Cx 
interface and describe the purpose of the different information classes included in the user profile. 



B.1 General description 



The following picture gives an outline of the UML model of the user profile, which is downloaded from HSS to S- 
CSCF: 



IMS Subscription 



Private ID 



1...n 



Service Profile 



Figure B.1.1: User Profile 

IMS Subscription class contains as a parameter the private user identity of the user in NAI format. 

Each instance of the IMS Subscription class contains one or several instances of the class Service Profile. 



B.2 Service profile 



The following picture gives an outline of the UML model of the Service Profile class: 



Service Profile 



1...n 



Public Identification 



0...1 



Core Network Service 
Authorization 



0...n 



Initial Filter Criteria 



0...n 



Shared IFC Set 



Identifier; Integer 



Figure B.2.1 : Service Profile 

Each instance of the Service Profile class consists of one or several instances of the class Public Identification. Public 
Identification class contains the Public Identities associated with that service profile. The information in the Core 
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Network Service Authorization, Initial Filter Criteria, and Shared iFC Set classes apply to all Public Identification 
instances, which are included in one Service profile class. 

Each instance of the Service Profile class contains zero or one instance of the class Core Network Service 
Authorization. If no instance of the class Core Network Service Authorization is present, no filtering related to 
subscribed media or restriction on IMS Communication Service Identifiers applies in S-CSCF. 

Each instance of the class Service Profile contains zero or several instances of the class Initial Filter Criteria. 

Each instance of the class Service Profile contains zero or more instances of the class Shared iFC Set. A Shared iFC Set 
points to a set of Initial Filter Criteria locally administered and stored at the S-CSCF. Shared iFC Sets may be shared by 
several Service Profiles. 

B.2.1 Public Identification 

The following picture gives an outline of the UML model of Public Identification class: 



Public Identification 

Barringlndication: Boolean 
IdentityType: enumerated 
WildcardedPSI: anyURl 
DisplayName: string 
AliasldentityGroupId: string 
ServiceLevelTracelnfo: string 
ServicePriorityLevel: enumerated 



SIP URL Identity 
SIP URL 



0..n 

ExtendedPriority 



PriorityNameSpace 
PriorityLevel 



Tel URL Identity 



Wildcarded Public User 
Identity 



WildcardedlMPU 



Figure B.2.1.1: Public Identification 

Public Identification class can contain either SIP URL Identity, i.e. SIP URL, or Tel URL Identity class, i.e. tel URL, or 
Wildcarded Public User Identity, i.e. Wildcarded Public Service Identity or Wildcarded User Identity (see 3GPP TS 
23.003 [17]), 

The attribute Barringlndication is of type Boolean. If it is absent, or if it is present and set to FALSE, the S-CSCF shall 
not restrict the use of that public user identity in any IMS communications. If it is present and set to TRUE, the S-CSCF 
shall prevent that public identity from being used in any IMS communication except registrations and re-registrations, 
as specified in 3GPP TS 24.229 [8]. 

The attribute IdentityType indicates if the identity is a distinct Public User Identity, a distinct Public Service Identity, a 
Public Service Identity matching a Wildcarded Public Service Identity, a Public User Identity matching a Wildcarded 
Public User Identity, a Wildcarded Public Service Identity or a Wildcarded Public User Identity. If the identity type is 
not present, it is assumed to be a Public User Identity. 

The attribute WildcardedPSI shall be present and contain the Wildcarded Public Service Identity that matched the 
Public Service Identity if the identity is a Public Service Identity matching a Wildcarded Public Service Identity. This 
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Wildcarded Public Service identity shall be sent as stored in the HSS, that is, including the delimiter described in 3GPP 
TS 23.003 [17]. 

The attribute DisplayName allows a name to be associated with a Public Identity. 

The attribute AliasIdentityGroupID indicates the Alias Public User Identity Set to which the Public User Identity 
belongs. If the "Aliaslnd" feature is supported, all Public User Identities shall have an AliasIdentityGroupID allocated. 
Within an IMS subscription Public User Identities that have the same AliasIdentityGroupID allocated shall be in the 
same implicit registration sets, and shall share their service profile and the same service data for each and every service, 
and shall be regarded as aliases of each other, as defined in the3GPP TS 23.008 [18]. If the "Aliaslnd" feature is not 
supported, all Public User Identities within an IMS subscription that are within the same implicit registration set and 
share their service profile shall be regarded aliases of each other. 

The attribute WildcardedlMPU shall be present and contain the Wildcarded Public User Identity that matched the 
Public User Identity if the identity is a Public User Identity matching a Wildcarded Public User Identity. This 
Wildcarded Public User identity shall be sent as stored in the HSS, that is, including the delimiter described in 3GPP TS 

23.003 [17]. 

The attribute ServiceLevelTracelnfo provides the Service Level Tracing Information that is related to the Public User 
Identity. If the ServiceLevelTracelnfo is present, service level tracing shall be enabled in the S-CSCF for the related 
Public User Identity according to the configuration data received. If the ServiceLevelTracelnfo is not present, service 
level tracing is disabled in the S-CSCF for the related Public User Identity. 

The attribute ServicePriorityLevel provides the Priority Level allowed for the Public User Identity, which can be used 
by the S-CSCF and other network elements for Priority Service. 

The attribute PriorityNamespace provides the Namespace as specified in IETF RFC 4412 [22] and to which the 
Extended Priority refers. 

The attribute PriorityLevel provides the Priority Level allowed for the Public User Identity, for the Extended Priority. 
Its value depends on the PriorityNamespace. 

B.2.1 A Core Network Service Authorization 

The following picture gives an outline of the UML model of Core Network Service Authorization class: 



Core Network Service 
Authorization 



0...1 



Subscribed Media 
Profile Id 



0...1 

List of Service ids 



Subscribed Media 
Profileld: Integer 



0...n 



Service Id: string 



Figure B.2.1 A.1: Core Network Service Authorization 

Each instance of the Core Network Service Authorization class contains zero or one instance of the class Subscribed 
Media Profile Id. If no instance of the class Subscribed Media Profile Id is present, no filtering related to subscribed 
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media applies in S-CSCF. The Subscribed Media Profile Id is of type Integer and identifies a media profile in the S- 
CSCF for the authorization of media parameters. 

Each instance of the Core Network Service Authorization class contains zero or one instance of the class List of Service 
Ids. If no instance of the class List of Service Ids is present, no restriction on IMS Communication Service Identifiers 
related applies in S-CSCF. Each instance of the class List of Service Ids contains zero or more instances of the class 
Service Id. The Service Id is of type String and identifies an IMS Communication Service Identifier that the subscriber 
is authorized to use. 

B.2.2 Initial Filter Criteria 

The following picture gives an outline of the UML model of Initial Filter Criteria class: 





Initial Filter Criteria 






-Priority: integer 
-ProfilePartlndicator: enumerated 
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Service Point Trigger 






Service Information 


IncludeRegisterRequest 


IncludeRegisterResponse 


-ConditionNegated: boolean 
-Group: list of integers 


-Servicelnfo: string 















Figure B.2.2. 1.1: Initial Filter Criteria 

Each instance of the Initial Filter Criteria class is composed of zero or one instance of a Trigger Point class and one 
instance of an Application Server class. Priority indicates the priority of the Filter Criteria. The higher the Priority 
Number the lower the priority of the Filter Criteria is; i.e., a Filter Criteria with a higher value of Priority Number shall 
be assessed after the Filter Criteria with a smaller Priority Number have been assessed. The same priority shall not be 
assigned to more than one initial Filter Criterion. 

ProfilePartlndicator attribute is an enumerated type, with possible values "REGISTERED and UNREGISTERED, 
indicating if the iFC is a part of the registered or unregistered user profile. If ProfilePartlndicator is missing from the 
iFC, the iFC is considered to be relevant to both the registered and unregistered parts of the user profile, i.e. belongs to 
the common part of the user profile. 

Trigger Point class describes the trigger points that should be checked in order to find out if the indicated Application 
Server should be contacted or not. Each TriggerPoint is a boolean expression in Conjunctive or Disjunctive Normal 
form (CNF of DNF). The absence of Trigger Point instance will indicate an unconditional triggering to Application 
Server. 

The attribute ConditionTypeCNF attribute defines how the set of SPTs are expressed, i.e. either an Ored set of ANDed 
sets of SPT statements or an ANDed set of Ored sets of statements. Individual SPT statements can also be negated. 
These combinations are termed, respectively. Disjunctive Normal Form (DNF) and Conjunctive Normal Form (CNF) 
for the SPT (see Annex C). Both DNF and CNF forms can be used. ConditionTypeCNF is a boolean that is TRUE when 
the Trigger Point associated with the FilterCriteria is a boolean expression in Conjunctive Normal Form (CNF) and 
FALSE if the Trigger Point is expressed in Disjunctive Normal Form (DNF) (see Annex C). 

Each Trigger Point is composed by 1 to n instances of the class Service Point Trigger. 
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Application Server class defines the application server, which is contacted, if the trigger points are met. Server Name is 
the SIP URL of the application server to contact. Default Handling determines whether the dialog should be released if 
the Application Server could not be reached or not; it is of type enumerated and can take the values: 
SESSION_CONTINUED or SESSION_TERMINATED. 

The Application Server class contains zero or one instance of the Service Information class, zero or one instance of the 
Include Register Request class and zero or one instance of the Include Register Response class. The Service 
Information class allows to download to S-CSCF information that is to be transferred transparently to an Application 
Server when the trigger points of a filter criterion are satisfied. Servicelnformation is a string conveying that 
information. See 3GPP TS 23.218 [7] for a description of the use of this information element. The Include Register 
Request class indicates to the S-CSCF that the incoming SIP REGISTER request is to be transferred to an Application 
Server when the trigger points of a filter criterion are satisfied. See 3GPP TS 23.218 [7] for a description of the use of 
this information element. The Include Register Response class indicates to the S-CSCF that the final SIP response to the 
incoming SIP REGISTER request is to be transferred to an Application Server when the trigger points of a filter 
criterion are satisfied. See 3GPP TS 23.218 [7] for a description of the use of this information element. 



B.2.3 Service Point Trigger 



The following picture gives an outline of the UML model of Service Point Trigger class: 



Service Point Trigger 



ConditionNegated: boolean 
Group: list of integer 
RegistrationType: list of 
enumerated 



Request-URl 



RequestURl: string 



SIP Metiiod 



Method: string 



SIP Header 



Header: string 
Content: string 



Session Case 



SessionCase: enumerated 



Session Description 



Line: string 
Content: string 



Figure B.2.3. 1 : Service Point Trigger 

The attribute Group of the class Service Point Trigger allows the grouping of SPTs that will configure the sub- 
expressions inside a CNF or DNF expression. For instance, in the following CNF expression (Ah-B).(Ch-D), Ah-B and 
Ch-D would correspond to different groups. 

In CNF, the attribute Group identifies the ORed sets of SPT instances. If the SPT belongs to different ORed sets, SPT 
can have more than one Group values assigned. At least one Group must be assigned for each SPT. 

In DNF, the attribute Group identifies the ANDed sets of SPT instances. If the SPT belongs to different ANDed sets, 
SPT can have more than one Group values assigned. At least one Group must be assigned for each SPI. 

The attribute ConditionNegated of the class Service Point Trigger defines whether the individual SPT instance is 
negated (i.e. NOT logical expression). 

The attribute RegistrationType of the class Service Point Trigger is relevant only to the SIP Method SPT with a value of 
"REGISTER" and its' support is optional in the HSS and in the S-CSCF. The RegistrationType may contain a list of 
values that define whether the SPT matches to REGISTER messages that are related to initial registrations, re- 
registrations, and/or de-registrations. If RegistrationTypes are given, the SIP Method SPT with a value of "REGISTER" 
shall match if any of the RegistrationTypes match and the S-CSCF supports the RegistrationType attribute. If the SIP 
Method SPT contains value "REGISTER", and no RegistrationType is given, or if the S-CSCF does not support the 
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RegistrationType attribute, the SIP Method SPT matches to all REGISTER messages. The attribute RegistrationType 
may be discarded if it is present in an SPT other than SIP Method with value "REGISTER". 

Request-URI class defines SPT for the Request-URI. Request-URI contains attribute RequestURI. 

SIP Method class defines SPT for the SIP method. SIP Method contains attribute Method which holds the name of any 
SIP method. 

SIP Header class defines SPT for the presence or absence of any SIP header or for the content of any SIP header. SIP 
Header contains attribute Header which identifies the SIP Header, which is the SPT, and the Content attribute defines 
the value of the SIP Header if required. 

The absence of the Content attribute and ConditionNegated = TRUE indicates that the SPT is the absence of a 
determined SIP header. 

Session Case class represents an enumerated type, with possible values "Originating", "Terminating_Registered", 
"Terminating_Unregistered", "Originating_Unregistered", "Originating_CDIV" indicating whether the filter should be 
used by the S-CSCF handling the Originating, Terminating for a registered end user. Terminating for an unregistered 
end user. Originating for an unregistered end user, or Originating after Call Diversion services. 

Session Description Information class defines SPT for the content of any SDP field within the body of a SIP Method. 
The Line attribute identifies the line inside the session description. Content is a string defining the content of the line 
identified by Line. 
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Annex C (informative): 

Conjunctive and Disjunctive Normal Form 

A Trigger Point expression is constructed out of atomic expressions (i.e. Service Point Trigger) linked by Boolean 
operators AND, OR and NOT. Any logical expression constructed in that way can be transformed to forms called 
Conjunctive Normal Form (CNF) and Disjunctive Normal Form (DNF). 

A Boolean expression is said to be in Conjunctive Normal Form if it is expressed as a conjunction of disjunctions of 
literals (positive or negative atoms), i.e. as an AND of clauses, each of which is the OR of one of more atomic 
expressions. 

Taking as an example the following trigger: 

Method = "INVITE" OR Method = "MESSAGE" OR (Method="SUBSCRIBE" AND NOT Header = "from" Content = 
"joe") 

The trigger can be split into the following atomic expressions: 

Method="INVITE" 

Method="MESSAGE" 

Method="SUBSCRIBE" 

NOT header="from" Content ="joe" 

Grouping the atomic expressions, the CNF expression equivalent to the previous example looks like: 

(Method="INVITE" OR Method = "MESSAGE" OR Method="SUBSCRIBE") AND (Method="INVITE" OR Method 
= "MESSAGE" OR (NOT Header = "from" Content = "joe")) 

This result in two "OR" groups linked by "AND" (CNF): 

(Method="INVITE" OR Method = "MESSAGE" OR Method="SUBSCRIBE") 
(Method="INVITE" OR Method = "MESSAGE" OR (NOT Header = "from" Content = "joe")) 

The XML representation of the trigger is: 

<?xml version="1.0" encoding="UTF-8"?> 

<IMS Subscription xmlns : xsi= "http ://www. w3 . org/200 1 /XMLSchema-instance" 

xsi:noNamespaceSchemaLocation="CxDataType.xsd"> 

<PrivateID>IMPIl@homedomain.com</PrivateID> 
<ServiceProfile> 

<PubUcIdentity> 

<BarringIndication>l</BarringIndication> 
<Identity> sip:IMPUl @homedomain.com </Identity> 
</PublicIdentity> 
<PublicIdentity> 

<Identity> sip:IMPU2@ho medomain.com </Identity> 
</PublicIdentity> 
<InitialFilterCriteria> 

<Priority>0</Priority> 
<TriggerPoint> 

<ConditionTypeCNF> 1 </ConditionTypeCNF> 
<SPT> 

<ConditionNegated>0</ConditionNegated> 

<Group>0</Group> 

<Method>INVITE</Method> 
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</SPT> 
<SPT> 

<ConditionNegated>0</ConditionNegated> 

<Group>0</Group> 

<Method>MES S AGE</Method> 
</SPT> 
<SPT> 

<ConditionNegated>0</ConditionNegated> 

<Group>0</Group> 

<Method>SUBSCRIBE</Method> 
</SPT> 
<SPT> 

<ConditionNegated>0</ConditionNegated> 

<Group> 1 </Group> 

<Method>INVITE</Method> 
</SPT> 
<SPT> 

<ConditionNegated>0</ConditionNegated> 

<Group> 1 </Group> 

<Method>MES S AGE</Method> 
</SPT> 

<SPT> 

<ConditionNegated> 1 </ConditionNegated> 

<Group> 1 </Group> 

<SIPHeader> 

<Header>From</Header> 
<Content> "j oe" </Content> 
</SIPHeader> 
</SPT> 
</TriggerPoint> 
< Applic ationS erver> 

<ServerName>sip: AS 1 @homedomain.com</ServerName> 
<DefaultHandling>0</DefaultHandling> 
</ApplicationServer> 
</InitialFilterCriteria> 
</ServiceProfile> 
</IMSSubscription> 

A Boolean expression is said to be in Disjunctive Normal Form if it is expressed as a disjunction of conjunctions of 
literals (positive or negative atoms), i.e. as an OR of clauses, each of which is the AND of one of more atomic 
expressions. 

The previous example is already in DNF, composed by the following groups: 

Method="INVITE" 

Method="MESSAGE" 

Method="SUBSCRIBE" AND (NOT header="from" Content ="joe") 

The XML representation of the trigger is: 

<?xml version="1.0" encoding="UTF-8"?> 

<IMS Subscription xmlns : xsi= "http ://www. w3 . org/200 1 /XMLSchema-instance" 

xsi:noNamespaceSchemaLocation="CxDataType.xsd"> 

<PrivateID>IMPIl@homedomain.com</PrivateID> 
<ServiceProfile> 

<PublicIdentity> 

<BarringIndication>l</BarringIndication> 
<Identity> sip:IMPUl @homedomain.com </Identity> 
</PublicIdentity> 
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<PublicIdentity> 

<Identity> sip:IMPU2@ho medomain.com </Identity> 
</PublicIdentity> 
<InitialFilterCriteria> 

<Priority>0</Priority> 
<TriggerPoint> 

<ConditionTypeCNF>0</ConditionTypeCNF> 
<SPT> 

<ConditionNegated>0</ConditionNegated> 
<Group>0</Group> 
<Method>INVITE</Method> 
</SPT> 
<SPT> 

<ConditionNegated>0</ConditionNegated> 
<Group> 1 </Group> 
<Method>MES S AGE</Method> 
</SPT> 
<SPT> 

<ConditionNegated>0</ConditionNegated> 
<Group>2</Group> 
<Method>SUBSCRIBE</Method> 
</SPT> 
<SPT> 

<ConditionNegated> 1 </ConditionNegated> 

<Group>2</Group> 

<SIPHeader> 

<Header>From</Header> 
<Content> "j oe" </Content> 
</SIPHeader> 
</SPT> 
</TriggerPoint> 
< Applic ationS erver> 

<ServerName>sip: AS 1 @homedomain.com</ServerName> 
<DefaultHandlingindex="0">0</DefaultHandling> 
</ApplicationServer> 
</InitialFilterCriteria> 
</ServiceProfile> 
</IMSSubscription> 
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Annex D (informative): 

High-level format for the User Profile 

The way the information shall be transferred through the Cx interface can be seen from a high-level point of view in the 
following picture: 



Private 
identif. 
data 



Service 
Profile 



Public id. data 



Core Network Serv. Auth. App.&Serv. Filters 



Figure D.I : Example of in-line format of user profile 



If more than one service profile is created, for example to assign a different set of filters to public identifiers 1 and 2 and 
public identity 3, the information shall be packaged in the following way: 



Private 
identif. 
data 



Service 
Profile 



Public id. 1 Public id. 2 CN Serv. Aut 



A&S Filters 



Service 
Profile 2 



Public id. 3 CN Serv. Aut 



A&S Filters 



Figure D.2: Example of in-line format of user profile 
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Annex E (normative): 

XML schema for the Cx interface user profile 

The file CxDataType_Rel8.xsd, attached to this specification, contains the XML schema for the user profile that is sent 
over the Cx interface. The user profile XML schema defines that are used in the user profile XML. The data that is 
allowed to be sent in the user profile may vary depending on the features supported by the Diameter end points, see 
3GPP TS 29.229 [5]. The user profile XML schema file is intended to be used by an XML parser. The version of the Cx 
application sending the user profile XML shall be the same as the version of the sent user profile XML and thus it 
implies the version of the user profile XML schema to be used to validate it. 

Table E. 1 describes the data types and the dependencies among them that configure the user profile XML schema. 
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Table E.I : XML schema for the Cx interface user profile: simple data types 



Data type 


Tag 


Base type 


Comments 


tPriority 


Priority 


Integer 


>=0 


tProfilePartlndicator 


ProfllePartlndlcator 


enumerated 


Possible values: 

(REGISTERED) 

1 (UNREGISTERED) 


tSharedlFCSetID 


SharedlFCSetID 


Integer 


>=0 


tGroupID 


Group 


Integer 


>=0 


tRegistrationlype 


ReglstratlonType 


enumerated 


Possible values: 

(INITIAL REGISTRATION) 

1 (RE-REGISTRATION) 

2 (DE-REGISTRATION) 


tDefaultHandling 


DefaultHandlIng 


enumerated 


Possible values: 

(SESSION CONTINUED) 

1 (SESSION TERMINATED) 


tDirectionOfRequest 


SesslonCase 


enumerated 


Possible values: 

(ORIGINATING SESSION) 

1 TERMINATING REGISTERED 

2 (TERMINATING UNREGISTERED) 

3 (ORIGINATING UNREGISTERED) 

4 (ORIGINATING CDIV) 


t Private ID 


PrIvatelD 


anyURI 


Syntax described In IETF RFC 2486 [14] 


tSIP URL 


Identity 


anyURI 


Syntax described In IETF RFC 3261 [11] 


tlEL URL 


Identity 


anyURI 


Syntax described In IETF RFC 3966 [15] 


tidentity 


Identity 


(union) 


Union of tSIP URL, andtTEL URL and 
tWIIdcardedlMPU 


tldentitylype 


IdentltyType 


enumerated 


Possible values: 

(PUBLIC USER IDENTITY) 

1 (DISTINCT PSI) 

2 (WILDCARDED PSI) 

3 (WILDCARDED IMPU) (See Note 1) 

4 (IMPU WILDCARD) (See Note 1) 


tServicelnfo 


Servlcelnfo 


string 




tString 


RequestURI, Method, 
Header, Content, Line 


string 




tBool 


CondltlonTypeCNF, 

CondltlonNegated, 

Barrlnglndicatlon 


boolean 


Possible values: 

(false) 

1 (true) 


tSubscribedMediaProfil 
eld 


SubscrlbedMedlaProfI 
leld 


Integer 


>=0 


tDlspiayName 


DIsplayName 


string 




tAliasldentityGroupID 


AliasldentltyGroupID 


string 




tServiceLevelTracelnfo 


ServlceLevelTrace 1 nf 




string 


Syntax described in clause 14 within IETF draft- 
dawes-slpplng-debug [20] 


tServicePriorityLevel 


ServlcePrlorltyLevel 


enumerated 


Possible values: 

(Highest priority) 

1 

2 

3 

4 (Lowest priority) 


tPriorityNamespace 


PrIorltyNamespace 


string 


Possible values are those of the namespaces that are 
defined In IETF RFC 4412 [22] or defined according 
to the lANA registration procedure described In IETF 
RFC 4412 [22] for Resource-Priority Namespaces. 


tPriorityLevel 


PrIorltyLevel 


string 


Possible values depend on the PrIorltyNamespace 
and are specified with the associated namespace that 
Is defined in IETF RFC 4412 [22] or defined according 
to the lANA registration procedure described In IETF 
RFC 4412 [22] for Resource-Priority Namespaces 


NOTE 1 : IMPU _WILDCARD Indicates that the content of the identity in the "Identity" tag is a Wildcarded Public User 
Identity, while WILDCARDEDJMPU Indicates that It Is a specific Public User Identity matching a Wildcarded 
Public User Identity. 
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Table E.2: XML schema for the Cx interface user profile: complex data types 



Data type 


Tag 


Compound of 


Tag 


Type 


Cardinality 


tIMSSubscription 


llVlSSubscription 


PrivatelD 


tPrivatelD 




ServiceProfile 


tServiceProfile 


(1 to n) 


tServiceProfile 


ServiceProfile 


Publicldentity 


tPublicldentity 


(1 to n) 


CoreNetworkServicesAut 
horization 


CoreNetworkServicesAuthori 
zation 


(Oto 1) 


InitialFilterCriteria 


tInitialFilterCriteria 


(0 to n) 


Extension 


tServiceProfileExtension 


(Oto 1) 


tServiceProfileExtension 


Extension 


SharedlFCSetID 


tSharedlFCSetID 


(0 to n) 


tCoreNetworkServicesAu 
thorization 


CoreNetworkServi 
cesAuthorization 


Subscribed IVIediaProfileld 


tSubscribedMediaProfileld 


(Oto 1) 






Extension 


tCNServicesAuthorizationExt 
ension 


(Oto 1) 


tPublicldentity 


Publicldentity 


Barringlndication 


tBool 


(Oto 1) 


Identity 


tidentity 




Extension 


tPublicldentityExtension 


(Otol) 


tInitialFilterCriteria 


InitialFilterCriteria 


Priority 


tPriority 




TriggerPoint 


tTrigger 


(Oto 1) 


ApplicationServer 


tApplicationServer 




ProfilePartlndicator 


tProfilePartlndicator 


(0 to 1 ) 


tlrigger 


TriggerPoint 


ConditionlypeCNF 


tBool 




SPT 


tSePoTri 


(1 to n) 


tSePoTri 


SPT 


ConditionNegated 


tBool 


(Oto1) 


Group 


tGroupID 


(1 ton 


o 

a> 
o 

o 

s: 
O 


RequestURI 


tString 




IVIethod 


tString 




SIPHeader 


tHeader 




SessionCase 


tDirectionOfRequest 




SessionDescripti 
on 


tSessionDescription 




Extension 


tSePoTri Extension 


(Oto 1) 


tSePoTri Extension 


Extension 


RegistrationType 


tRegistrationType 


(0 to 2) 


tHeader 


SIPHeader 


Header 


tString 




Content 


tString 


(Oto 1) 


tSessionDescription 


SessionDescriptio 
n 


Line 


tString 




Content 


tString 


(Oto 1) 


tApplicationServer 


ApplicationServer 


ServerName 


tSIP URL 




DefaultHandling 


tDefaultHandling 


(Otol) 


Service Info 


tServicelnfo 


(Oto 1) 


Extension 


tApplicationServerExtension 


(Oto 1) 


tApplicationServerExtens 
ion 


Extension 


IncludeRegisterRequest 


tIncludeRegisterRequest 


(Oto 1) 


IncludeRegisterRespons 
e 


tIncludeRegisterResponse 


(Oto 1) 


tIncludeRegisterRequest 


IncludeRegisterRe 
quest 


(NOTE 2) 


(NOTE 2) 


(Otol) 


tIncludeRegisterRespons 
e 


tIncludeRegisterR 
esponse 


(NOTE 2) 


(NOTE 2) 


(Otol) 


tPublicldentity Extension 


Extension 


IdentityType 


tIdentityType 


(Oto 1) 


WildcardedPSI 


anyURI (NOTE 3) 


(Otol) 


Extension 


tPublicldentityExtension2 


(Oto 1) 


tPublicldentity Extension2 


Extension 


DisplayName 


tDisplayName 


(Otol) 


AliasldentityGroupID 


tAliasldentityGroupID 


(Oto 1) 


Extension 


tPublicldentityExtensionS 


(Oto 1) 


tPublicldentity Extensions 


Extension 


WildcardedlMPU 


anyURI (NOTE 3) 


(0 to 1 ) 


ServiceLevelTracelnfo 


tServiceLevelTracelnfo 


(Otol) 


ServicePriorityLevel 


ServicePriorityLevel 


(Otol) 


Extension 


tPublicldentityExtension4 


(Oto 1) 


tPublicldentity Extension4 


Extension 


ExtendedPriority 


tExtendedPriority 


(0 to n) 


tExtendedPriority 


ExtendedPriority 


PriorityNamespace 


tPriorityNamespace 




PriorityLevel 


tPriorityLevel 




tCNServicesAuthorizatio 
nExtension 


Extension 


ListOfServicelds 


tListOf Service Ids 


(Otol) 
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tListOfServicelds | ListOfServicelds | Serviceld | tString | (0 to n) ~ 

NOTE 1 : "n" shall be interpreted as non-bounded. 

NOTE 2: empty cells shall be interpreted as complex XML elements without defined content. 

NOTE 3: the syntax of Wildcarded Public User Identity and Wildcarded Service Identity shall be as described in 3GPP TS 
23.003 [17] 
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Annex F (normative): 

Definition of parameters for service point trigger matching 

Table F. 1 defines the parameters that are transported in the user profile XML. 

Table F.I : Definition of parameters in the user profile XML 



Tag 


Description 


SIPHeader 


A SIP Header SPT shall be evaluated separately against each header instance within the SIP 
message. The SIP Header SPT matches if at least one header occurrence matches the SPT. 


Header (of 
SIPHeader) 


Header tag shall include a regular expression in a form of Extended Regular Expressions 
(ERE) as defined in chapter 9 in IEEE 1003.1-2004 Part 1 [13]. The regular expression shall 
be matched against the header-name of the SIP header. For definition of header and header- 
name, see IETF RFC 3261 [11]. Before matching the header-name to the pattern, all SWSs 
shall be removed from the header-name and all LWSs in the header-name shall be reduced to 
a single white space character (SP). For definition of SWS and LWS, see IETF RFC 3261 [11]. 


Content (of 
SIPHeader) 


Content tag shall include a regular expression in a form of Extended Regular Expressions 
(ERE) as defined in chapter 9 in IEEE 1003.1-2004 Part 1 [13]. The regular expression shall 
be matched against the header-value of the SIP header. For definition of header and header- 
value, see IETF RFC 3261 [11]. If the SIP header contains several header-values in a comma- 
separated list, each of the header-value shall be matched against the pattern for the Content 
separately. Before matching the header-value to the pattern, all SWSs shall be removed from 
the header-value and all LWSs in the header-value shall be reduced to a single white space 
character (SP). For definition of SWS and LWS, see IETF RFC 3261 [11]. 


SessionDescription 


A Session Description SPT shall be evaluated separately against each SDP field instance 
within the SIP message. The Session Description SPT matches if at least one field occurrence 
matches the SPT. 


Line (of 
SessionDescription) 


Line tag shall include a regular expression in a form of Extended Regular Expressions (ERE) 
as defined in chapter 9 in IEEE 1003.1-2004 Part 1 [13]. The regular expression shall be 
matched against the type of the field inside the session description. For definition of type, see 
chapter 6 in IETF RFC 4566 [12]. 


Content (of 
SessionDescription) 


Content tag shall include a regular expression in a form of Extended Regular Expressions 
(ERE) as defined in chapter 9 in IEEE 1003.1-2004 Part 1 [13]. The regular expression shall 
be matched against the value of the field inside the session description. For definition of value, 
see chapter 6 in IETF RFC 4566 [12]. 
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Annex G (informative): 
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